zerobin.js 43 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215
  1. /**
  2. * ZeroBin
  3. *
  4. * a zero-knowledge paste bin
  5. *
  6. * @link http://sebsauvage.net/wiki/doku.php?id=php:zerobin
  7. * @copyright 2012 Sébastien SAUVAGE (sebsauvage.net)
  8. * @license http://www.opensource.org/licenses/zlib-license.php The zlib/libpng License
  9. * @version 0.20
  10. */
  11. 'use strict';
  12. // Immediately start random number generator collector.
  13. sjcl.random.startCollectors();
  14. $(function() {
  15. /**
  16. * static helper methods
  17. */
  18. var helper = {
  19. /**
  20. * Converts a duration (in seconds) into human friendly approximation.
  21. *
  22. * @param int seconds
  23. * @return array
  24. */
  25. secondsToHuman: function(seconds)
  26. {
  27. if (seconds < 60)
  28. {
  29. var v = Math.floor(seconds);
  30. return [v, 'second'];
  31. }
  32. if (seconds < 60 * 60)
  33. {
  34. var v = Math.floor(seconds / 60);
  35. return [v, 'minute'];
  36. }
  37. if (seconds < 60 * 60 * 24)
  38. {
  39. var v = Math.floor(seconds / (60 * 60));
  40. return [v, 'hour'];
  41. }
  42. // If less than 2 months, display in days:
  43. if (seconds < 60 * 60 * 24 * 60)
  44. {
  45. var v = Math.floor(seconds / (60 * 60 * 24));
  46. return [v, 'day'];
  47. }
  48. var v = Math.floor(seconds / (60 * 60 * 24 * 30));
  49. return [v, 'month'];
  50. },
  51. /**
  52. * Converts an associative array to an encoded string
  53. * for appending to the anchor.
  54. *
  55. * @param object associative_array Object to be serialized
  56. * @return string
  57. */
  58. hashToParameterString: function(associativeArray)
  59. {
  60. var parameterString = '';
  61. for (key in associativeArray)
  62. {
  63. if(parameterString === '')
  64. {
  65. parameterString = encodeURIComponent(key);
  66. parameterString += '=' + encodeURIComponent(associativeArray[key]);
  67. }
  68. else
  69. {
  70. parameterString += '&' + encodeURIComponent(key);
  71. parameterString += '=' + encodeURIComponent(associativeArray[key]);
  72. }
  73. }
  74. // padding for URL shorteners
  75. parameterString += '&p=p';
  76. return parameterString;
  77. },
  78. /**
  79. * Converts a string to an associative array.
  80. *
  81. * @param string parameter_string String containing parameters
  82. * @return object
  83. */
  84. parameterStringToHash: function(parameterString)
  85. {
  86. var parameterHash = {};
  87. var parameterArray = parameterString.split('&');
  88. for (var i = 0; i < parameterArray.length; i++)
  89. {
  90. var pair = parameterArray[i].split('=');
  91. var key = decodeURIComponent(pair[0]);
  92. var value = decodeURIComponent(pair[1]);
  93. parameterHash[key] = value;
  94. }
  95. return parameterHash;
  96. },
  97. /**
  98. * Get an associative array of the parameters found in the anchor
  99. *
  100. * @return object
  101. */
  102. getParameterHash: function()
  103. {
  104. var hashIndex = window.location.href.indexOf('#');
  105. if (hashIndex >= 0)
  106. {
  107. return this.parameterStringToHash(window.location.href.substring(hashIndex + 1));
  108. }
  109. else
  110. {
  111. return {};
  112. }
  113. },
  114. /**
  115. * Convert all applicable characters to HTML entities
  116. *
  117. * @param string str
  118. * @return string encoded string
  119. */
  120. htmlEntities: function(str)
  121. {
  122. return String(str).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
  123. },
  124. /**
  125. * Text range selection.
  126. * From: http://stackoverflow.com/questions/985272/jquery-selecting-text-in-an-element-akin-to-highlighting-with-your-mouse
  127. *
  128. * @param string element : Indentifier of the element to select (id="").
  129. */
  130. selectText: function(element)
  131. {
  132. var doc = document,
  133. text = doc.getElementById(element),
  134. range,
  135. selection;
  136. // MS
  137. if (doc.body.createTextRange)
  138. {
  139. range = doc.body.createTextRange();
  140. range.moveToElementText(text);
  141. range.select();
  142. }
  143. // all others
  144. else if (window.getSelection)
  145. {
  146. selection = window.getSelection();
  147. range = doc.createRange();
  148. range.selectNodeContents(text);
  149. selection.removeAllRanges();
  150. selection.addRange(range);
  151. }
  152. },
  153. /**
  154. * Set text of a DOM element (required for IE)
  155. * This is equivalent to element.text(text)
  156. *
  157. * @param object element : a DOM element.
  158. * @param string text : the text to enter.
  159. */
  160. setElementText: function(element, text)
  161. {
  162. // For IE<10: Doesn't support white-space:pre-wrap; so we have to do this...
  163. if ($('#oldienotice').is(':visible')) {
  164. var html = this.htmlEntities(text).replace(/\n/ig,'\r\n<br>');
  165. element.html('<pre>'+html+'</pre>');
  166. }
  167. // for other (sane) browsers:
  168. else
  169. {
  170. element.text(text);
  171. }
  172. },
  173. /**
  174. * replace last child of element with message
  175. *
  176. * @param object element : a jQuery wrapped DOM element.
  177. * @param string message : the message to append.
  178. */
  179. setMessage: function(element, message)
  180. {
  181. var content = element.contents();
  182. if (content.length > 0)
  183. {
  184. content[content.length - 1].nodeValue = ' ' + message;
  185. }
  186. else
  187. {
  188. this.setElementText(element, message);
  189. }
  190. },
  191. /**
  192. * Convert URLs to clickable links.
  193. * URLs to handle:
  194. * <code>
  195. * magnet:?xt.1=urn:sha1:YNCKHTQCWBTRNJIV4WNAE52SJUQCZO5C&xt.2=urn:sha1:TXGCZQTH26NL6OUQAJJPFALHG2LTGBC7
  196. * http://localhost:8800/zero/?6f09182b8ea51997#WtLEUO5Epj9UHAV9JFs+6pUQZp13TuspAUjnF+iM+dM=
  197. * http://user:password@localhost:8800/zero/?6f09182b8ea51997#WtLEUO5Epj9UHAV9JFs+6pUQZp13TuspAUjnF+iM+dM=
  198. * </code>
  199. *
  200. * @param object element : a jQuery DOM element.
  201. */
  202. urls2links: function(element)
  203. {
  204. var markup = '<a href="$1" rel="nofollow">$1</a>';
  205. element.html(
  206. element.html().replace(
  207. /((http|https|ftp):\/\/[\w?=&.\/-;#@~%+-]+(?![\w\s?&.\/;#~%"=-]*>))/ig,
  208. markup
  209. )
  210. );
  211. element.html(
  212. element.html().replace(
  213. /((magnet):[\w?=&.\/-;#@~%+-]+)/ig,
  214. markup
  215. )
  216. );
  217. },
  218. /**
  219. * minimal sprintf emulation for %s and %d formats
  220. * From: http://stackoverflow.com/questions/610406/javascript-equivalent-to-printf-string-format#4795914
  221. *
  222. * @param string format
  223. * @param mixed args one or multiple parameters injected into format string
  224. * @return string
  225. */
  226. sprintf: function()
  227. {
  228. var args = arguments;
  229. if (typeof arguments[0] == 'object') args = arguments[0];
  230. var string = args[0],
  231. i = 1;
  232. return string.replace(/%((%)|s|d)/g, function (m) {
  233. // m is the matched format, e.g. %s, %d
  234. var val = null;
  235. if (m[2]) {
  236. val = m[2];
  237. } else {
  238. val = args[i];
  239. // A switch statement so that the formatter can be extended.
  240. switch (m)
  241. {
  242. case '%d':
  243. val = parseFloat(val);
  244. if (isNaN(val)) {
  245. val = 0;
  246. }
  247. break;
  248. // Default is %s
  249. }
  250. ++i;
  251. }
  252. return val;
  253. });
  254. }
  255. };
  256. /**
  257. * internationalization methods
  258. */
  259. var i18n = {
  260. /**
  261. * supported languages, minus the built in 'en'
  262. */
  263. supportedLanguages: ['de', 'fr', 'pl'],
  264. /**
  265. * translate a string, alias for translate()
  266. *
  267. * @param string $messageId
  268. * @param mixed args one or multiple parameters injected into placeholders
  269. * @return string
  270. */
  271. _: function()
  272. {
  273. return this.translate(arguments);
  274. },
  275. /**
  276. * translate a string
  277. *
  278. * @param string $messageId
  279. * @param mixed args one or multiple parameters injected into placeholders
  280. * @return string
  281. */
  282. translate: function()
  283. {
  284. var args = arguments, messageId, usesPlurals;
  285. if (typeof arguments[0] == 'object') args = arguments[0];
  286. if (usesPlurals = $.isArray(args[0]))
  287. {
  288. // use the first plural form as messageId, otherwise the singular
  289. messageId = (args[0].length > 1 ? args[0][1] : args[0][0]);
  290. }
  291. else
  292. {
  293. messageId = args[0];
  294. }
  295. if (messageId.length == 0) return messageId;
  296. if (!this.translations.hasOwnProperty(messageId))
  297. {
  298. if (this.language != 'en') console.debug(
  299. 'Missing translation for: ' + messageId
  300. );
  301. this.translations[messageId] = args[0];
  302. }
  303. if (usesPlurals && $.isArray(this.translations[messageId]))
  304. {
  305. var n = parseInt(args[1] || 1),
  306. key = this.getPluralForm(n),
  307. maxKey = this.translations[messageId].length - 1;
  308. if (key > maxKey) key = maxKey;
  309. args[0] = this.translations[messageId][key];
  310. args[1] = n;
  311. }
  312. else
  313. {
  314. args[0] = this.translations[messageId];
  315. }
  316. return helper.sprintf(args);
  317. },
  318. /**
  319. * per language functions to use to determine the plural form
  320. * From: http://localization-guide.readthedocs.org/en/latest/l10n/pluralforms.html
  321. *
  322. * @param int number
  323. * @return int array key
  324. */
  325. getPluralForm: function(n) {
  326. switch (this.language)
  327. {
  328. case 'fr':
  329. return (n > 1 ? 1 : 0);
  330. case 'pl':
  331. return (n == 1 ? 0 : n%10 >= 2 && n %10 <=4 && (n%100 < 10 || n%100 >= 20) ? 1 : 2);
  332. // en, de
  333. default:
  334. return (n != 1 ? 1 : 0);
  335. }
  336. },
  337. /**
  338. * load translations into cache, then execute callback function
  339. *
  340. * @param function callback
  341. */
  342. loadTranslations: function(callback)
  343. {
  344. var language = (navigator.language || navigator.userLanguage).substring(0, 2);
  345. // note that 'en' is built in, so no translation is necessary
  346. if (this.supportedLanguages.indexOf(language) == -1)
  347. {
  348. callback();
  349. }
  350. else
  351. {
  352. $.getJSON('i18n/' + language + '.json', function(data) {
  353. i18n.language = language;
  354. i18n.translations = data;
  355. callback();
  356. });
  357. }
  358. },
  359. /**
  360. * built in language
  361. */
  362. language: 'en',
  363. /**
  364. * translation cache
  365. */
  366. translations: {}
  367. }
  368. /**
  369. * filter methods
  370. */
  371. var filter = {
  372. /**
  373. * Compress a message (deflate compression). Returns base64 encoded data.
  374. *
  375. * @param string message
  376. * @return base64 string data
  377. */
  378. compress: function(message)
  379. {
  380. return Base64.toBase64( RawDeflate.deflate( Base64.utob(message) ) );
  381. },
  382. /**
  383. * Decompress a message compressed with compress().
  384. *
  385. * @param base64 string data
  386. * @return string message
  387. */
  388. decompress: function(data)
  389. {
  390. return Base64.btou( RawDeflate.inflate( Base64.fromBase64(data) ) );
  391. },
  392. /**
  393. * Compress, then encrypt message with key.
  394. *
  395. * @param string key
  396. * @param string password
  397. * @param string message
  398. * @return encrypted string data
  399. */
  400. cipher: function(key, password, message)
  401. {
  402. password = password.trim();
  403. if (password.length == 0)
  404. {
  405. return sjcl.encrypt(key, this.compress(message));
  406. }
  407. return sjcl.encrypt(key + sjcl.codec.hex.fromBits(sjcl.hash.sha256.hash(password)), this.compress(message));
  408. },
  409. /**
  410. * Decrypt message with key, then decompress.
  411. *
  412. * @param string key
  413. * @param string password
  414. * @param encrypted string data
  415. * @return string readable message
  416. */
  417. decipher: function(key, password, data)
  418. {
  419. if (data != undefined)
  420. {
  421. try
  422. {
  423. return this.decompress(sjcl.decrypt(key, data));
  424. }
  425. catch(err)
  426. {
  427. try
  428. {
  429. return this.decompress(sjcl.decrypt(key + sjcl.codec.hex.fromBits(sjcl.hash.sha256.hash(password)), data));
  430. }
  431. catch(err)
  432. {}
  433. }
  434. }
  435. return '';
  436. }
  437. };
  438. var zerobin = {
  439. /**
  440. * Get the current script location (without search or hash part of the URL).
  441. * eg. http://server.com/zero/?aaaa#bbbb --> http://server.com/zero/
  442. *
  443. * @return string current script location
  444. */
  445. scriptLocation: function()
  446. {
  447. var scriptLocation = window.location.href.substring(0,window.location.href.length
  448. - window.location.search.length - window.location.hash.length),
  449. hashIndex = scriptLocation.indexOf('#');
  450. if (hashIndex !== -1)
  451. {
  452. scriptLocation = scriptLocation.substring(0, hashIndex);
  453. }
  454. return scriptLocation;
  455. },
  456. /**
  457. * Get the pastes unique identifier from the URL
  458. * eg. http://server.com/zero/?c05354954c49a487#xxx --> c05354954c49a487
  459. *
  460. * @return string unique identifier
  461. */
  462. pasteID: function()
  463. {
  464. return window.location.search.substring(1);
  465. },
  466. /**
  467. * Return the deciphering key stored in anchor part of the URL
  468. *
  469. * @return string key
  470. */
  471. pageKey: function()
  472. {
  473. // Some web 2.0 services and redirectors add data AFTER the anchor
  474. // (such as &utm_source=...). We will strip any additional data.
  475. var key = window.location.hash.substring(1), // Get key
  476. i = key.indexOf('=');
  477. // First, strip everything after the equal sign (=) which signals end of base64 string.
  478. if (i > -1) key = key.substring(0, i + 1);
  479. // If the equal sign was not present, some parameters may remain:
  480. i = key.indexOf('&');
  481. if (i > -1) key = key.substring(0, i);
  482. // Then add trailing equal sign if it's missing
  483. if (key.charAt(key.length - 1) !== '=') key += '=';
  484. return key;
  485. },
  486. /**
  487. * ask the user for the password and return it
  488. *
  489. * @throws error when dialog canceled
  490. * @return string password
  491. */
  492. requestPassword: function()
  493. {
  494. var password = prompt(i18n._('Please enter the password for this paste:'), '');
  495. if (password == null) throw 'password prompt canceled';
  496. if (password.length == 0) return this.requestPassword();
  497. return password;
  498. },
  499. /**
  500. * use given format on paste, defaults to plain text
  501. *
  502. * @param string format
  503. */
  504. formatPaste: function(format)
  505. {
  506. switch (format || 'plaintext')
  507. {
  508. case 'markdown':
  509. if (typeof Showdown == 'object')
  510. {
  511. var converter = new Showdown.converter();
  512. this.clearText.html(
  513. converter.makeHtml(this.clearText.html())
  514. );
  515. this.clearText.removeClass('hidden');
  516. }
  517. this.prettyMessage.addClass('hidden');
  518. break;
  519. case 'syntaxhighlighting':
  520. if (typeof prettyPrint == 'function') prettyPrint();
  521. default:
  522. // Convert URLs to clickable links.
  523. helper.urls2links(this.clearText);
  524. helper.urls2links(this.prettyPrint);
  525. this.clearText.addClass('hidden');
  526. this.prettyMessage.removeClass('hidden');
  527. }
  528. if (format == 'plaintext') this.prettyPrint.removeClass('prettyprint');
  529. },
  530. /**
  531. * Show decrypted text in the display area, including discussion (if open)
  532. *
  533. * @param string key : decryption key
  534. * @param array comments : Array of messages to display (items = array with keys ('data','meta')
  535. */
  536. displayMessages: function(key, comments)
  537. {
  538. // Try to decrypt the paste.
  539. var password = this.passwordInput.val();
  540. if (!this.prettyPrint.hasClass('prettyprinted')) {
  541. try
  542. {
  543. var cleartext = filter.decipher(key, password, comments[0].data);
  544. if (cleartext.length == 0)
  545. {
  546. if (password.length == 0) password = this.requestPassword();
  547. cleartext = filter.decipher(key, password, comments[0].data);
  548. }
  549. if (cleartext.length == 0) throw 'failed to decipher message';
  550. this.passwordInput.val(password);
  551. if (comments[0].attachment)
  552. {
  553. var attachment = filter.decipher(key, password, comments[0].attachment);
  554. if (attachment)
  555. {
  556. this.attachmentLink.attr('href', attachment);
  557. this.attachment.removeClass('hidden');
  558. }
  559. }
  560. helper.setElementText(this.clearText, cleartext);
  561. helper.setElementText(this.prettyPrint, cleartext);
  562. this.formatPaste(comments[0].meta.formatter);
  563. }
  564. catch(err)
  565. {
  566. this.clearText.addClass('hidden');
  567. this.prettyMessage.addClass('hidden');
  568. this.cloneButton.addClass('hidden');
  569. this.showError(i18n._('Could not decrypt data (Wrong key?)'));
  570. return;
  571. }
  572. }
  573. // Display paste expiration / for your eyes only.
  574. if (comments[0].meta.expire_date)
  575. {
  576. var expiration = helper.secondsToHuman(comments[0].meta.remaining_time),
  577. expirationLabel = [
  578. 'This document will expire in %d ' + expiration[1] + '.',
  579. 'This document will expire in %d ' + expiration[1] + 's.'
  580. ];
  581. helper.setMessage(this.remainingTime, i18n._(expirationLabel, expiration[0]));
  582. this.remainingTime.removeClass('foryoureyesonly')
  583. .removeClass('hidden');
  584. }
  585. if (comments[0].meta.burnafterreading)
  586. {
  587. $.get(this.scriptLocation() + '?pasteid=' + this.pasteID() + '&deletetoken=burnafterreading', 'json')
  588. .fail(function() {
  589. zerobin.showError(i18n._('Could not delete the paste, it was not stored in burn after reading mode.'));
  590. });
  591. helper.setMessage(this.remainingTime, i18n._(
  592. 'FOR YOUR EYES ONLY. Don\'t close this window, this message can\'t be displayed again.'
  593. ));
  594. this.remainingTime.addClass('foryoureyesonly')
  595. .removeClass('hidden');
  596. // Discourage cloning (as it can't really be prevented).
  597. this.cloneButton.addClass('hidden');
  598. }
  599. // If the discussion is opened on this paste, display it.
  600. if (comments[0].meta.opendiscussion)
  601. {
  602. this.comments.html('');
  603. // iterate over comments
  604. for (var i = 1; i < comments.length; i++)
  605. {
  606. var place = this.comments;
  607. var comment=comments[i];
  608. var cleartext = '[' + i18n._('Could not decrypt comment; Wrong key?') + ']';
  609. try
  610. {
  611. cleartext = filter.decipher(key, password, comment.data);
  612. }
  613. catch(err)
  614. {}
  615. // If parent comment exists, display below (CSS will automatically shift it right.)
  616. var cname = '#comment_' + comment.meta.parentid;
  617. // If the element exists in page
  618. if ($(cname).length)
  619. {
  620. place = $(cname);
  621. }
  622. var divComment = $('<article><div class="comment" id="comment_' + comment.meta.commentid+'">'
  623. + '<div class="commentmeta"><span class="nickname"></span><span class="commentdate"></span></div><div class="commentdata"></div>'
  624. + '<button class="btn btn-default btn-sm">' + i18n._('Reply') + '</button>'
  625. + '</div></article>');
  626. divComment.find('button').click({commentid: comment.meta.commentid}, $.proxy(this.openReply, this));
  627. helper.setElementText(divComment.find('div.commentdata'), cleartext);
  628. // Convert URLs to clickable links in comment.
  629. helper.urls2links(divComment.find('div.commentdata'));
  630. // Try to get optional nickname:
  631. var nick = filter.decipher(key, password, comment.meta.nickname);
  632. if (nick.length > 0)
  633. {
  634. divComment.find('span.nickname').text(nick);
  635. }
  636. else
  637. {
  638. divComment.find('span.nickname').html('<i>' + i18n._('Anonymous') + '</i>');
  639. }
  640. divComment.find('span.commentdate')
  641. .text(' (' + (new Date(comment.meta.postdate * 1000).toLocaleString()) + ')')
  642. .attr('title', 'CommentID: ' + comment.meta.commentid);
  643. // If an avatar is available, display it.
  644. if (comment.meta.vizhash)
  645. {
  646. divComment.find('span.nickname')
  647. .before(
  648. '<img src="' + comment.meta.vizhash + '" class="vizhash" title="' +
  649. i18n._('Anonymous avatar (Vizhash of the IP address)') + '" /> '
  650. );
  651. }
  652. place.append(divComment);
  653. }
  654. var divComment = $(
  655. '<div class="comment"><button class="btn btn-default btn-sm">' +
  656. i18n._('Add comment') + '</button></div>'
  657. );
  658. divComment.find('button').click({commentid: this.pasteID()}, $.proxy(this.openReply, this));
  659. this.comments.append(divComment);
  660. this.discussion.removeClass('hidden');
  661. }
  662. },
  663. /**
  664. * Open the comment entry when clicking the "Reply" button of a comment.
  665. *
  666. * @param Event event
  667. */
  668. openReply: function(event)
  669. {
  670. event.preventDefault();
  671. var source = $(event.target),
  672. commentid = event.data.commentid,
  673. hint = i18n._('Optional nickname...');
  674. // Remove any other reply area.
  675. $('div.reply').remove();
  676. var reply = $(
  677. '<div class="reply">' +
  678. '<input type="text" id="nickname" class="form-control" title="' + hint + '" placeholder="' + hint + '" />' +
  679. '<textarea id="replymessage" class="replymessage form-control" cols="80" rows="7"></textarea>' +
  680. '<br /><button id="replybutton" class="btn btn-default btn-sm">' + i18n._('Post comment') + '</button>' +
  681. '<div id="replystatus"> </div>' +
  682. '</div>'
  683. );
  684. reply.find('button').click({parentid: commentid}, $.proxy(this.sendComment, this));
  685. source.after(reply);
  686. $('#replymessage').focus();
  687. },
  688. /**
  689. * Send a reply in a discussion.
  690. *
  691. * @param Event event
  692. */
  693. sendComment: function(event)
  694. {
  695. event.preventDefault();
  696. this.errorMessage.addClass('hidden');
  697. // Do not send if no data.
  698. var replyMessage = $('#replymessage');
  699. if (replyMessage.val().length == 0) return;
  700. this.showStatus(i18n._('Sending comment...'), true);
  701. var parentid = event.data.parentid;
  702. var cipherdata = filter.cipher(this.pageKey(), this.passwordInput.val(), replyMessage.val());
  703. var ciphernickname = '';
  704. var nick = $('#nickname').val();
  705. if (nick != '')
  706. {
  707. ciphernickname = filter.cipher(this.pageKey(), this.passwordInput.val(), nick);
  708. }
  709. var data_to_send = {
  710. data: cipherdata,
  711. parentid: parentid,
  712. pasteid: this.pasteID(),
  713. nickname: ciphernickname
  714. };
  715. $.post(this.scriptLocation(), data_to_send, function(data)
  716. {
  717. if (data.status == 0)
  718. {
  719. zerobin.showStatus(i18n._('Comment posted.'), false);
  720. $.get(zerobin.scriptLocation() + '?' + zerobin.pasteID() + '&json', function(data)
  721. {
  722. if (data.status == 0)
  723. {
  724. zerobin.displayMessages(zerobin.pageKey(), data.messages);
  725. }
  726. else if (data.status == 1)
  727. {
  728. zerobin.showError(i18n._('Could not refresh display: %s', data.message));
  729. }
  730. else
  731. {
  732. zerobin.showError(i18n._('Could not refresh display: %s', i18n._('unknown status')));
  733. }
  734. }, 'json')
  735. .fail(function() {
  736. zerobin.showError(i18n._('Could not refresh display: %s', i18n._('server error or not responding')));
  737. });
  738. }
  739. else if (data.status == 1)
  740. {
  741. zerobin.showError(i18n._('Could not post comment: %s', data.message));
  742. }
  743. else
  744. {
  745. zerobin.showError(i18n._('Could not post comment: %s', i18n._('unknown status')));
  746. }
  747. }, 'json')
  748. .fail(function() {
  749. zerobin.showError(i18n._('Could not post comment: %s', i18n._('server error or not responding')));
  750. });
  751. },
  752. /**
  753. * Send a new paste to server
  754. *
  755. * @param Event event
  756. */
  757. sendData: function(event)
  758. {
  759. event.preventDefault();
  760. var files = document.getElementById('file').files; // FileList object
  761. // Do not send if no data.
  762. if (this.message.val().length == 0 && !(files && files[0])) return;
  763. // If sjcl has not collected enough entropy yet, display a message.
  764. if (!sjcl.random.isReady())
  765. {
  766. this.showStatus(i18n._('Sending paste (Please move your mouse for more entropy)...'), true);
  767. sjcl.random.addEventListener('seeded', function() {
  768. this.sendData(event);
  769. });
  770. return;
  771. }
  772. $('.navbar-toggle').click();
  773. this.password.addClass('hidden');
  774. this.showStatus(i18n._('Sending paste...'), true);
  775. var randomkey = sjcl.codec.base64.fromBits(sjcl.random.randomWords(8, 0), 0);
  776. var cipherdata_attachment;
  777. var password = this.passwordInput.val();
  778. if(files && files[0])
  779. {
  780. if(typeof FileReader === undefined)
  781. {
  782. this.showError(i18n._('Your browser does not support uploading encrypted files. Please use a newer browser.'));
  783. return;
  784. }
  785. var reader = new FileReader();
  786. // Closure to capture the file information.
  787. reader.onload = (function(theFile)
  788. {
  789. return function(e) {
  790. zerobin.sendDataContinue(
  791. randomkey,
  792. filter.cipher(randomkey, password, e.target.result)
  793. );
  794. }
  795. })(files[0]);
  796. reader.readAsDataURL(files[0]);
  797. }
  798. else if(this.attachmentLink.attr('href'))
  799. {
  800. this.sendDataContinue(
  801. randomkey,
  802. filter.cipher(randomkey, password, this.attachmentLink.attr('href'))
  803. );
  804. }
  805. else
  806. {
  807. this.sendDataContinue(randomkey, '');
  808. }
  809. },
  810. /**
  811. * Send a new paste to server, step 2
  812. *
  813. * @param Event event
  814. */
  815. sendDataContinue: function(randomkey, cipherdata_attachment)
  816. {
  817. var cipherdata = filter.cipher(randomkey, this.passwordInput.val(), this.message.val());
  818. var data_to_send = {
  819. data: cipherdata,
  820. expire: $('#pasteExpiration').val(),
  821. formatter: $('#pasteFormatter').val(),
  822. burnafterreading: this.burnAfterReading.is(':checked') ? 1 : 0,
  823. opendiscussion: this.openDiscussion.is(':checked') ? 1 : 0
  824. };
  825. if (cipherdata_attachment.length > 0)
  826. {
  827. data_to_send.attachment = cipherdata_attachment;
  828. }
  829. $.post(this.scriptLocation(), data_to_send, function(data)
  830. {
  831. if (data.status == 0) {
  832. zerobin.stateExistingPaste();
  833. var url = zerobin.scriptLocation() + '?' + data.id + '#' + randomkey;
  834. var deleteUrl = zerobin.scriptLocation() + '?pasteid=' + data.id + '&deletetoken=' + data.deletetoken;
  835. zerobin.showStatus('', false);
  836. zerobin.errorMessage.addClass('hidden');
  837. $('#pastelink').html(i18n._('Your paste is <a id="pasteurl" href="%s">%s</a> <span id="copyhint">(Hit [Ctrl]+[c] to copy)</span>', url, url));
  838. $('#deletelink').html('<a href="' + deleteUrl + '">' + i18n._('Delete data') + '</a>');
  839. zerobin.pasteResult.removeClass('hidden');
  840. // We pre-select the link so that the user only has to [Ctrl]+[c] the link.
  841. helper.selectText('pasteurl');
  842. zerobin.showStatus('', false);
  843. helper.setElementText(zerobin.clearText, zerobin.message.val());
  844. helper.setElementText(zerobin.prettyPrint, zerobin.message.val());
  845. zerobin.formatPaste(data_to_send.formatter);
  846. }
  847. else if (data.status==1)
  848. {
  849. zerobin.showError(i18n._('Could not create paste: %s', data.message));
  850. }
  851. else
  852. {
  853. zerobin.showError(i18n._('Could not create paste: %s', i18n._('unknown status')));
  854. }
  855. }, 'json')
  856. .fail(function() {
  857. zerobin.showError(i18n._('Could not create paste: %s', i18n._('server error or not responding')));
  858. });
  859. },
  860. /**
  861. * Put the screen in "New paste" mode.
  862. */
  863. stateNewPaste: function()
  864. {
  865. this.message.text('');
  866. this.cloneButton.addClass('hidden');
  867. this.rawTextButton.addClass('hidden');
  868. this.remainingTime.addClass('hidden');
  869. this.pasteResult.addClass('hidden');
  870. this.clearText.addClass('hidden');
  871. this.discussion.addClass('hidden');
  872. this.prettyMessage.addClass('hidden');
  873. this.sendButton.removeClass('hidden');
  874. this.expiration.removeClass('hidden');
  875. this.formatter.removeClass('hidden');
  876. this.burnAfterReadingOption.removeClass('hidden');
  877. this.openDisc.removeClass('hidden');
  878. this.newButton.removeClass('hidden');
  879. this.password.removeClass('hidden');
  880. this.attach.removeClass('hidden');
  881. this.attachment.removeClass('hidden');
  882. this.message.removeClass('hidden');
  883. this.message.focus();
  884. },
  885. /**
  886. * Put the screen in "Existing paste" mode.
  887. */
  888. stateExistingPaste: function()
  889. {
  890. this.sendButton.addClass('hidden');
  891. // No "clone" for IE<10.
  892. if ($('#oldienotice').is(":visible"))
  893. {
  894. this.cloneButton.addClass('hidden');
  895. }
  896. else
  897. {
  898. this.cloneButton.removeClass('hidden');
  899. }
  900. this.rawTextButton.removeClass('hidden');
  901. this.attach.addClass('hidden');
  902. this.attachment.addClass('hidden');
  903. this.expiration.addClass('hidden');
  904. this.formatter.addClass('hidden');
  905. this.burnAfterReadingOption.addClass('hidden');
  906. this.openDisc.addClass('hidden');
  907. this.newButton.removeClass('hidden');
  908. this.pasteResult.addClass('hidden');
  909. this.message.addClass('hidden');
  910. this.clearText.addClass('hidden');
  911. this.prettyMessage.removeClass('hidden');
  912. },
  913. /**
  914. * If "burn after reading" is checked, disable discussion.
  915. */
  916. changeBurnAfterReading: function()
  917. {
  918. if (this.burnAfterReading.is(':checked') )
  919. {
  920. this.openDisc.addClass('buttondisabled');
  921. this.openDiscussion.attr({checked: false, disabled: true});
  922. }
  923. else
  924. {
  925. this.openDisc.removeClass('buttondisabled');
  926. this.openDiscussion.removeAttr('disabled');
  927. }
  928. },
  929. /**
  930. * Reload the page
  931. *
  932. * @param Event event
  933. */
  934. reloadPage: function(event)
  935. {
  936. event.preventDefault();
  937. window.location.href = this.scriptLocation();
  938. },
  939. /**
  940. * Return raw text
  941. *
  942. * @param Event event
  943. */
  944. rawText: function(event)
  945. {
  946. event.preventDefault();
  947. var paste = this.clearText.html();
  948. var newDoc = document.open('text/html', 'replace');
  949. newDoc.write('<pre>' + paste + '</pre>');
  950. newDoc.close();
  951. },
  952. /**
  953. * Clone the current paste.
  954. *
  955. * @param Event event
  956. */
  957. clonePaste: function(event)
  958. {
  959. event.preventDefault();
  960. this.stateNewPaste();
  961. // Erase the id and the key in url
  962. history.replaceState(document.title, document.title, this.scriptLocation());
  963. this.showStatus('', false);
  964. if (this.attachmentLink.attr('href'))
  965. {
  966. this.clonedFile.removeClass('hidden');
  967. this.fileWrap.addClass('hidden');
  968. }
  969. this.message.text(this.clearText.text());
  970. $('.navbar-toggle').click();
  971. },
  972. /**
  973. * Create a new paste.
  974. */
  975. newPaste: function()
  976. {
  977. this.stateNewPaste();
  978. this.showStatus('', false);
  979. this.message.text('');
  980. $('.navbar-toggle').click();
  981. },
  982. /**
  983. * Removes an attachment.
  984. */
  985. removeAttachment: function()
  986. {
  987. this.clonedFile.addClass('hidden');
  988. // removes the saved decrypted file data
  989. $('#attachment a').attr('href', '');
  990. // the only way to deselect the file is to recreate the input
  991. this.fileWrap.html(this.fileWrap.html());
  992. this.fileWrap.removeClass('hidden');
  993. },
  994. /**
  995. * Display an error message
  996. * (We use the same function for paste and reply to comments)
  997. *
  998. * @param string message : text to display
  999. */
  1000. showError: function(message)
  1001. {
  1002. if (this.status.length)
  1003. {
  1004. this.status.addClass('errorMessage').text(message);
  1005. }
  1006. else
  1007. {
  1008. this.errorMessage.removeClass('hidden');
  1009. helper.setMessage(this.errorMessage, message);
  1010. }
  1011. this.replyStatus.addClass('errorMessage').text(message);
  1012. },
  1013. /**
  1014. * Display a status message
  1015. * (We use the same function for paste and reply to comments)
  1016. *
  1017. * @param string message : text to display
  1018. * @param boolean spin (optional) : tell if the "spinning" animation should be displayed.
  1019. */
  1020. showStatus: function(message, spin)
  1021. {
  1022. this.replyStatus.removeClass('errorMessage').text(message);
  1023. if (!message)
  1024. {
  1025. this.status.html(' ');
  1026. return;
  1027. }
  1028. if (message == '')
  1029. {
  1030. this.status.html(' ');
  1031. return;
  1032. }
  1033. this.status.removeClass('errorMessage').text(message);
  1034. if (spin)
  1035. {
  1036. var img = '<img src="img/busy.gif" style="width:16px;height:9px;margin:0 4px 0 0;" />';
  1037. this.status.prepend(img);
  1038. this.replyStatus.prepend(img);
  1039. }
  1040. },
  1041. /**
  1042. * bind events to DOM elements
  1043. */
  1044. bindEvents: function()
  1045. {
  1046. this.burnAfterReading.change($.proxy(this.changeBurnAfterReading, this));
  1047. this.sendButton.click($.proxy(this.sendData, this));
  1048. this.cloneButton.click($.proxy(this.clonePaste, this));
  1049. this.rawTextButton.click($.proxy(this.rawText, this));
  1050. this.fileRemoveButton.click($.proxy(this.removeAttachment, this));
  1051. $('.reloadlink').click($.proxy(this.reloadPage, this));
  1052. },
  1053. /**
  1054. * main application
  1055. */
  1056. init: function()
  1057. {
  1058. // hide "no javascript" message
  1059. $('#noscript').hide();
  1060. // preload jQuery wrapped DOM elements and bind events
  1061. this.attach = $('#attach');
  1062. this.attachment = $('#attachment');
  1063. this.attachmentLink = $('#attachment a');
  1064. this.burnAfterReading = $('#burnafterreading');
  1065. this.burnAfterReadingOption = $('#burnafterreadingoption');
  1066. this.cipherData = $('#cipherdata');
  1067. this.clearText = $('#cleartext');
  1068. this.cloneButton = $('#clonebutton');
  1069. this.clonedFile = $('#clonedfile');
  1070. this.comments = $('#comments');
  1071. this.discussion = $('#discussion');
  1072. this.errorMessage = $('#errormessage');
  1073. this.expiration = $('#expiration');
  1074. this.fileRemoveButton = $('#fileremovebutton');
  1075. this.fileWrap = $('#filewrap');
  1076. this.formatter = $('#formatter');
  1077. this.message = $('#message');
  1078. this.newButton = $('#newbutton');
  1079. this.openDisc = $('#opendisc');
  1080. this.openDiscussion = $('#opendiscussion');
  1081. this.password = $('#password');
  1082. this.passwordInput = $('#passwordinput');
  1083. this.pasteResult = $('#pasteresult');
  1084. this.prettyMessage = $('#prettymessage');
  1085. this.prettyPrint = $('#prettyprint');
  1086. this.rawTextButton = $('#rawtextbutton');
  1087. this.remainingTime = $('#remainingtime');
  1088. this.replyStatus = $('#replystatus');
  1089. this.sendButton = $('#sendbutton');
  1090. this.status = $('#status');
  1091. this.bindEvents();
  1092. // Display status returned by php code if any (eg. Paste was properly deleted.)
  1093. if (this.status.text().length > 0)
  1094. {
  1095. this.showStatus(this.status.text(), false);
  1096. return;
  1097. }
  1098. // Keep line height even if content empty.
  1099. this.status.html(' ');
  1100. // Display an existing paste
  1101. if (this.cipherData.text().length > 1)
  1102. {
  1103. // Missing decryption key in URL?
  1104. if (window.location.hash.length == 0)
  1105. {
  1106. this.showError(i18n._('Cannot decrypt paste: Decryption key missing in URL (Did you use a redirector or an URL shortener which strips part of the URL?)'));
  1107. return;
  1108. }
  1109. // List of messages to display.
  1110. var messages = $.parseJSON(this.cipherData.text());
  1111. // Show proper elements on screen.
  1112. this.stateExistingPaste();
  1113. this.displayMessages(this.pageKey(), messages);
  1114. }
  1115. // Display error message from php code.
  1116. else if (this.errorMessage.text().length > 1)
  1117. {
  1118. this.showError(this.errorMessage.text());
  1119. }
  1120. // Create a new paste.
  1121. else
  1122. {
  1123. this.newPaste();
  1124. }
  1125. }
  1126. }
  1127. /**
  1128. * main application start, called when DOM is fully loaded
  1129. * runs zerobin when translations were loaded
  1130. */
  1131. i18n.loadTranslations($.proxy(zerobin.init, zerobin));
  1132. });