Files
bookhoard/templates/progress.templ
T
John O'Keefe fb95b6d400 CSP: replace 'unsafe-inline' with a content hash for the theme flash guard
script-src now allow-lists the guard by sha256 of its rendered bytes
(middleware.ScriptHashThemeFlashGuard) instead of 'unsafe-inline' — the
guard is the app's only inline <script>. security_headers_test.go renders
templates.ThemeFlashGuard() and fails with the replacement hash if the
script text ever drifts.

Executing anti-XSS strict CSP surfaced three latent violations the
eval-removal sweep couldn't see (hash mode is stricter than eval mode,
because inline event handler ATTRIBUTES now count against script-src):

1. admin_archived / admin_library: 15 native onclick=/onsubmit= handlers
   (modal open/close, folder-browser picker, purge button) converted to
   Alpine @click/@submit component methods — openCreateLibraryModal,
   hideModal, pickBrowsePath added to the admin component;
   purgeArchivedItems promoted from its window global into the component
   and the (window as any) exposure removed.

2. dashboard/docs: onclick handlers converted — dashboard's
   event.stopPropagation() → @click.stop; docs' sidebar/search closers →
   closeDocsSidebar/closeSearchResults component methods.

3. 8 onerror= image-fallback attributes (cover placeholders app-wide +
   audiobook cover hide) replaced by data-fallback attributes handled by
   one delegated capture-phase listener in web/src/image_fallback.ts —
   works for htmx-swapped content without re-binding.

Verified: theme guard applies a saved theme on public pages under the
hash CSP; 14-page authenticated sweep clean; admin pages clean under the
promoted admin; admin-library modal open/close bindings exercised;
readers render error-free; go build/vet/middleware-test, tsc, vp
check/test (146), build:ts all green.
2026-10-25 20:54:09 -04:00

123 lines
5.4 KiB
Templ

package templates
import "bookhoard/internal/handlers"
import "fmt"
templ Progress(user User, progressData []handlers.ProgressWithMedia, errorMessage string) {
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
<title>Reading Progress - Bookhoard</title>
<script src="/static/htmx.min.js"></script>
<link href="/static/style.css" rel="stylesheet"/>
<link rel="icon" type="image/svg+xml" href="/static/favicon.svg"/>
</head>
<body class={ "theme-" + user.Theme }>
@Header(user, "/progress")
<div class="w-full px-4 sm:px-6 lg:px-8 py-8">
<div class="mb-8 flex items-center gap-3">
<span class="grid place-items-center h-10 w-10 rounded-xl shrink-0" style="background-color: var(--accent-muted); color: var(--accent);">
@Icon("book-open", "h-5 w-5")
</span>
<div>
<h1 class="text-2xl font-bold tracking-tight" style="color: var(--text-primary)">Reading Progress</h1>
<p class="text-sm mt-0.5" style="color: var(--text-secondary)">Track your reading progress across all devices</p>
</div>
</div>
<div id="progress-container" class="space-y-6">
if len(progressData) == 0 {
<div class="card text-center py-16 px-6" style="color: var(--text-secondary)">
<div class="flex justify-center mb-4">
@Icon("book-open", "h-12 w-12 opacity-50")
</div>
<h3 class="text-xl font-semibold mb-2" style="color: var(--text-primary)">No Progress Yet</h3>
<p>Start reading a book to track your progress</p>
</div>
}
for _, item := range progressData {
<div class="card p-6">
<div class="flex gap-6">
<div class="flex-shrink-0">
<img
src={ item.CoverImagePath }
alt="Cover"
class="w-24 h-32 object-cover rounded-lg"
/>
</div>
<div class="flex-1 min-w-0">
<div class="flex justify-between items-start gap-4 mb-3">
<div class="min-w-0">
<a
href={ "/media/" + item.MediaItemID.String() }
class="inline-block hover:underline"
style="color: var(--text-primary); text-decoration: none;"
>
<h3 class="font-semibold text-lg">{ item.Title }</h3>
</a>
if item.Author != "" {
<p class="text-sm mt-0.5" style="color: var(--text-secondary)">by { item.Author }</p>
}
</div>
<span class="text-2xl font-bold shrink-0" style="color: var(--accent)">{ fmt.Sprintf("%.2f", item.ProgressPercentage) }%</span>
</div>
<div class="mb-4">
<div class="w-full rounded-full h-2.5" style="background-color: color-mix(in srgb, var(--text-primary) 12%, transparent);">
<div class="h-2.5 rounded-full transition-all" style={ "width: " + fmt.Sprintf("%.1f", item.ProgressPercentage) + "%; background-color: var(--accent);" }></div>
</div>
</div>
<div class="grid grid-cols-1 md:grid-cols-3 gap-3">
<div class="stat-card">
<span class="block text-xs font-semibold uppercase tracking-wide mb-1.5" style="color: var(--text-secondary)">Current Position</span>
<p class="text-sm font-medium" style="color: var(--text-primary)">
if item.FormatGroup == "audiobook" && item.DurationSeconds > 0 {
{ fmtSecondsHMS(item.ProgressPercentage/100*item.DurationSeconds) + " / " + fmtSecondsHMS(item.DurationSeconds) }
} else if item.FormatGroup == "reflowable" {
if item.EstimatedPages > 0 {
{ fmt.Sprintf("Page %d of %d (est.)", item.CurrentPage, item.EstimatedPages) }
} else {
{ fmt.Sprintf("%.2f%%", item.ProgressPercentage) }
}
} else {
{ fmt.Sprintf("%d / %d", item.CurrentPage, item.TotalPages) }
}
</p>
</div>
<div class="stat-card">
<span class="block text-xs font-semibold uppercase tracking-wide mb-1.5" style="color: var(--text-secondary)">Last Updated</span>
<p class="text-sm font-medium" style="color: var(--text-primary)">{ item.LastUpdated }</p>
</div>
<div class="stat-card">
<span class="block text-xs font-semibold uppercase tracking-wide mb-1.5" style="color: var(--text-secondary)">Synced From</span>
<div class="flex items-center gap-2">
<span class="text-xl">{ item.DeviceIcon }</span>
<span class="text-sm font-medium" style="color: var(--text-primary)">{ item.DeviceName }</span>
</div>
</div>
</div>
if item.DeviceIcon != "" {
<div class="mt-3 pt-3 border-t flex items-center gap-2 text-xs" style="border-color: var(--border); color: var(--text-secondary);">
@Icon("sync", "h-4 w-4")
<span>Last sync from <strong style="color: var(--text-primary)">{ item.DeviceName }</strong></span>
<span>({ item.DeviceType })</span>
</div>
}
if item.EpubCFI != "" {
<div class="mt-2 flex items-center gap-2 text-xs" style="color: var(--text-secondary);">
@Icon("bookmark", "h-3.5 w-3.5")
<span>CFI: { item.EpubCFI }</span>
</div>
}
</div>
</div>
</div>
}
</div>
</div>
@ErrorToast(errorMessage)
</body>
</html>
}