From 0822d0189694b0934b03f748641c91a2b6ee7fc0 Mon Sep 17 00:00:00 2001
From: kizahasi <rasis.aneki@gmail.com>
Date: Thu, 13 Jan 2022 23:31:24 +0900
Subject: [PATCH] =?UTF-8?q?feat(web-server):=20=E3=82=B7=E3=83=B3=E3=83=97?=
 =?UTF-8?q?=E3=83=AB=E3=83=AD=E3=82=B0=E5=87=BA=E5=8A=9B=E3=81=A7=E3=83=A6?=
 =?UTF-8?q?=E3=83=BC=E3=82=B6=E3=83=BC=E5=90=8D=E3=81=A8=E6=9B=B8=E3=81=8D?=
 =?UTF-8?q?=E8=BE=BC=E3=81=BF=E6=97=A5=E6=99=82=E3=82=92=E5=90=AB=E3=82=81?=
 =?UTF-8?q?=E3=81=AA=E3=81=84=E8=A8=AD=E5=AE=9A=E3=82=92=E8=BF=BD=E5=8A=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../room/message/GenerateLogModal.tsx         | 33 ++++++-
 .../src/utils/message/generateHtml.test.ts    |  9 ++
 .../src/utils/message/generateHtml.ts         | 32 +++++++
 .../src/utils/message/roomLogGenerator.ts     | 87 +++++++++++++------
 4 files changed, 135 insertions(+), 26 deletions(-)
 create mode 100644 apps/web-server/src/utils/message/generateHtml.test.ts
 create mode 100644 apps/web-server/src/utils/message/generateHtml.ts

diff --git a/apps/web-server/src/components/contextual/room/message/GenerateLogModal.tsx b/apps/web-server/src/components/contextual/room/message/GenerateLogModal.tsx
index 996a05060..62e5c1ee0 100644
--- a/apps/web-server/src/components/contextual/room/message/GenerateLogModal.tsx
+++ b/apps/web-server/src/components/contextual/room/message/GenerateLogModal.tsx
@@ -17,7 +17,7 @@ import {
     generateAsStaticHtml,
 } from '../../../../utils/message/roomLogGenerator';
 import moment from 'moment';
-import { Button, Modal, Progress, Radio } from 'antd';
+import { Button, Checkbox, Modal, Progress, Radio } from 'antd';
 import classNames from 'classnames';
 import { flex, flexColumn } from '../../../../utils/className';
 import { useApolloClient } from '@apollo/client';
@@ -63,6 +63,11 @@ export const GenerateLogModal: React.FC<Props> = ({ roomId, visible, onClose }:
     );
     const channelsFilterOptionsRef = useReadonlyRef(channelsFilterOptions);
 
+    const [showCreatedAt, setShowCreatedAt] = React.useState(true);
+    const showCreatedAtRef = useReadonlyRef(showCreatedAt);
+    const [showUsernameAlways, setShowUsernameAlways] = React.useState(true);
+    const showUsernameAlwaysRef = useReadonlyRef(showUsernameAlways);
+
     const [progress, setProgress] = React.useState<number>();
     const [errorMessage, setErrorMessage] = React.useState<string>();
     React.useEffect(() => {
@@ -131,6 +136,8 @@ export const GenerateLogModal: React.FC<Props> = ({ roomId, visible, onClose }:
                         messages: logData.data.result,
                         participants: participantsRef.current,
                         filter: ChannelsFilterOptions.toFilter(channelsFilterOptionsRef.current),
+                        showCreatedAt: showCreatedAtRef.current,
+                        showUsernameAlways: showUsernameAlwaysRef.current,
                     }),
                     `log_simple_${moment(new Date()).format('YYYY-MM-DD-HH-mm-ss')}.html`
                 );
@@ -177,6 +184,8 @@ export const GenerateLogModal: React.FC<Props> = ({ roomId, visible, onClose }:
         channelsFilterOptionsRef,
         configRef,
         firebaseStorageRef,
+        showCreatedAtRef,
+        showUsernameAlwaysRef,
     ]);
 
     return (
@@ -214,6 +223,28 @@ export const GenerateLogModal: React.FC<Props> = ({ roomId, visible, onClose }:
                     onChange={setChannelsFilterOptions}
                     disabled={isDownloading}
                 />
+                {logMode === simple && (
+                    <>
+                        <div style={{ marginTop: 4 }}>ログに含める情報</div>
+                        <div>
+                            <Checkbox
+                                checked={showUsernameAlways}
+                                disabled={isDownloading}
+                                onChange={e => setShowUsernameAlways(e.target.checked)}
+                            >
+                                常にユーザー名を含める
+                            </Checkbox>
+                            <br />
+                            <Checkbox
+                                checked={showCreatedAt}
+                                disabled={isDownloading}
+                                onChange={e => setShowCreatedAt(e.target.checked)}
+                            >
+                                書き込み日時
+                            </Checkbox>
+                        </div>
+                    </>
+                )}
                 <Button
                     style={{ alignSelf: 'start', marginTop: 8 }}
                     type='primary'
diff --git a/apps/web-server/src/utils/message/generateHtml.test.ts b/apps/web-server/src/utils/message/generateHtml.test.ts
new file mode 100644
index 000000000..5e7ce3047
--- /dev/null
+++ b/apps/web-server/src/utils/message/generateHtml.test.ts
@@ -0,0 +1,9 @@
+import { div, generateHtml, HtmlObject } from './generateHtml';
+
+describe('generateHtml', () => {
+    it('tests XSS', () => {
+        const htmlObject: HtmlObject = { type: div, children: '<script>alert("!")</script>' };
+        const htmlString = generateHtml(htmlObject);
+        expect(htmlString).not.toContain('<script>');
+    });
+});
diff --git a/apps/web-server/src/utils/message/generateHtml.ts b/apps/web-server/src/utils/message/generateHtml.ts
new file mode 100644
index 000000000..118cc7297
--- /dev/null
+++ b/apps/web-server/src/utils/message/generateHtml.ts
@@ -0,0 +1,32 @@
+import { escape } from 'html-escaper';
+
+export const div = 'div';
+export const span = 'span';
+type Type = typeof div | typeof span;
+
+export type HtmlObject = {
+    type: Type;
+    className?: string;
+    style?: string;
+    children?: string | HtmlObject[];
+};
+
+export const generateHtml = ({ type, className, style, children }: HtmlObject) => {
+    let childrenAsHtml: string;
+    if (children == null || typeof children === 'string') {
+        childrenAsHtml = children == null ? '' : escape(children);
+    } else {
+        childrenAsHtml = '';
+        children.forEach(c => {
+            childrenAsHtml = `${childrenAsHtml}${generateHtml(c)}`;
+        });
+    }
+    let startTag = type;
+    if (className != null) {
+        startTag += ` class="${className}"`;
+    }
+    if (style != null) {
+        startTag += ` style="${style}"`;
+    }
+    return `<${startTag}>${childrenAsHtml}</${type}>`;
+};
diff --git a/apps/web-server/src/utils/message/roomLogGenerator.ts b/apps/web-server/src/utils/message/roomLogGenerator.ts
index c42adb0df..3e43f8cc8 100644
--- a/apps/web-server/src/utils/message/roomLogGenerator.ts
+++ b/apps/web-server/src/utils/message/roomLogGenerator.ts
@@ -24,6 +24,7 @@ import { logHtml } from './richLogHtml';
 import { RoomMessageFilter } from '../../components/contextual/room/message/ChannelsFilter';
 import { WebConfig } from '../../configType';
 import { FirebaseStorage as FirebaseStorageType } from '@firebase/storage';
+import { div, generateHtml, HtmlObject, span } from './generateHtml';
 
 const privateMessage = 'privateMessage';
 const publicMessage = 'publicMessage';
@@ -124,7 +125,7 @@ const createRoomMessageArray = (
             const privateChannelSet = new PrivateChannelSet(new Set(msg.visibleTo));
             const channelName = privateChannelSet
                 .toChannelNameBase(participants)
-                .reduce((seed, elem, i) => (i === 0 ? elem : `${seed}, ${elem}`), '');
+                .reduce((seed, elem, i) => (i === 0 ? `秘話: ${elem}` : `${seed}, ${elem}`), '');
             if (isDeleted(msg)) {
                 if (msg.createdBy == null) {
                     return;
@@ -237,34 +238,70 @@ type GenerateLogParams = {
     filter: RoomMessageFilter;
 } & PublicChannelNames;
 
-export const generateAsStaticHtml = (params: GenerateLogParams) => {
+export const generateAsStaticHtml = (
+    params: GenerateLogParams & {
+        showCreatedAt: boolean;
+        showUsernameAlways: boolean;
+    }
+) => {
     const elements = createRoomMessageArray(params)
         .sort((x, y) => x.createdAt - y.createdAt)
         .map(msg => {
-            const left =
-                msg.value.createdBy == null
-                    ? '<span>システムメッセージ</span>'
-                    : `<span>${escape(msg.value.createdBy.rolePlayPart ?? '')}</span>
-${msg.value.createdBy.rolePlayPart == null ? '' : '<span> - </span>'}
-<span>${escape(msg.value.createdBy.participantNamePart)}</span>
-<span> (${escape(msg.value.channelName)})</span>
-<span> </span>`;
-
-            return `<div class="message" style="${
-                msg.value.textColor == null ? '' : `color: ${escape(msg.value.textColor)}`
-            }">
-${left}
-<span> @ ${moment(new Date(msg.createdAt)).format('MM/DD HH:mm:ss')} </span>
-${
-    msg.value.text == null
-        ? '<span class="text gray">(削除済み)</span>'
-        : `<span class="text">${escape(msg.value.text ?? '')} ${escape(
-              msg.value.commandResult ?? ''
-          )}</span>`
-}
-</div>`;
+            const left: HtmlObject[] = [];
+
+            if (msg.value.createdBy == null) {
+                left.push({
+                    type: span,
+                    children: 'システムメッセージ',
+                });
+            } else {
+                let name: HtmlObject;
+                if (msg.value.createdBy.rolePlayPart == null) {
+                    name = { type: span, children: msg.value.createdBy.participantNamePart };
+                } else {
+                    name = {
+                        type: span,
+                        children: params.showUsernameAlways
+                            ? `${msg.value.createdBy.rolePlayPart} - ${msg.value.createdBy.participantNamePart}`
+                            : msg.value.createdBy.participantNamePart,
+                    };
+                }
+                left.push(name);
+                const channel: HtmlObject = {
+                    type: span,
+                    children: ` (${msg.value.channelName})`,
+                };
+                left.push(channel);
+            }
+
+            const result: HtmlObject = {
+                type: div,
+                className: 'message',
+                style:
+                    msg.value.textColor == null
+                        ? undefined
+                        : `color: ${escape(msg.value.textColor)}`,
+                children: [
+                    ...left,
+                    {
+                        type: span,
+                        children: params.showCreatedAt
+                            ? ` @ ${moment(new Date(msg.createdAt)).format('MM/DD HH:mm:ss')} `
+                            : ' ',
+                    },
+                    {
+                        type: span,
+                        className: msg.value.text == null ? 'text gray' : 'text',
+                        children:
+                            msg.value.text == null
+                                ? '(削除済み)'
+                                : `${msg.value.text ?? ''} ${msg.value.commandResult ?? ''}`,
+                    },
+                ],
+            };
+            return generateHtml(result);
         })
-        .reduce((seed, elem) => seed + '\r\n' + elem, '');
+        .reduce((seed, elem) => (seed === '' ? elem : `${seed}\r\n${elem}`), '');
 
     return `<!DOCTYPE html>
 <html lang="ja">