Private
Public Access
ksmithandClaude Sonnet 5
760d2cf5dd
Slack/Discord-style link unfurling: the first http(s) URL in a message's content gets a small preview card (title/description/image/site name) fetched from the page's Open Graph tags. Backend: - Message.preview_url (extracted at create/edit time, cheap regex, no I/O) points at a link_previews cache row keyed by URL -- the same URL posted in different messages/rooms fetches once, and a failed fetch is cached too so a dead URL isn't retried on every reference. - The actual fetch runs in a background asyncio.create_task from broadcast_new_message/broadcast_message_update, on its own DB session, so a slow third-party site never delays message delivery. A separate "link_preview" WS envelope carries the result once it resolves. - SSRF protection reuses app/services/ssrf.py's validate_target_url (renamed from UnsafeWebhookUrlError to UnsafeUrlError now that it's shared with webhooks), but re-validates before every hop of a redirect chain rather than once up front -- redirects are followed manually so each intermediate URL is checked before it's ever connected to. - Parsed with stdlib html.parser -- no new dependency. Frontend: a LinkPreviewCard rendered under message content when present, patched into state live via the new WS envelope and included in message history for reloads. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
66 lines
1.3 KiB
CSS
66 lines
1.3 KiB
CSS
.link-preview-card {
|
|
display: flex;
|
|
gap: 10px;
|
|
align-items: stretch;
|
|
background: var(--ds-surface-2);
|
|
border: 1px solid var(--ds-border);
|
|
border-left: 3px solid var(--ds-accent);
|
|
border-radius: var(--radius);
|
|
padding: 10px 12px;
|
|
margin-bottom: 4px;
|
|
max-width: min(420px, 100%);
|
|
text-decoration: none;
|
|
color: var(--ds-text);
|
|
}
|
|
|
|
.link-preview-card:hover {
|
|
border-color: var(--ds-accent);
|
|
border-left-color: var(--ds-accent);
|
|
}
|
|
|
|
.link-preview-image {
|
|
flex: none;
|
|
width: 64px;
|
|
height: 64px;
|
|
object-fit: cover;
|
|
border-radius: 6px;
|
|
background: var(--ds-void);
|
|
}
|
|
|
|
.link-preview-body {
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 2px;
|
|
min-width: 0;
|
|
justify-content: center;
|
|
}
|
|
|
|
.link-preview-site {
|
|
font-size: 0.72rem;
|
|
font-weight: 700;
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.03em;
|
|
color: var(--ds-muted);
|
|
}
|
|
|
|
.link-preview-title {
|
|
font-size: 0.86rem;
|
|
font-weight: 700;
|
|
color: var(--ds-accent-2, var(--ds-accent));
|
|
overflow: hidden;
|
|
text-overflow: ellipsis;
|
|
display: -webkit-box;
|
|
-webkit-line-clamp: 2;
|
|
-webkit-box-orient: vertical;
|
|
}
|
|
|
|
.link-preview-description {
|
|
font-size: 0.8rem;
|
|
color: var(--ds-muted);
|
|
overflow: hidden;
|
|
text-overflow: ellipsis;
|
|
display: -webkit-box;
|
|
-webkit-line-clamp: 2;
|
|
-webkit-box-orient: vertical;
|
|
}
|