将 _sp 标识从 html 改为 js,运行方式由新窗口 document.write 改为 插入页面 iframe 沙箱执行,捕获 console 输出,postMessage 自适应高度。 后端 dnfs.py 白名单、校验、审核文本同步更新。
58 lines
2.4 KiB
HTML
58 lines
2.4 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<!-- 移动端适配核心标签 -->
|
|
<meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no">
|
|
<title>树状笔记</title>
|
|
<link rel="stylesheet" href="css/theme.css">
|
|
<link rel="stylesheet" href="css/codeblock.css">
|
|
</head>
|
|
<body>
|
|
<div class="box">
|
|
<div id="searchbox">
|
|
<input type="text" placeholder="输入你想搜索的内容......" id="searchtext" style="display: inline-block; width: 89%;">
|
|
<input type="submit" value="搜索" id="searchsubmit" style="display: inline-block;">
|
|
</div>
|
|
<div id="userpanel" class="userpanel"></div>
|
|
<div id="minimap" class="minimap"></div>
|
|
<div id="movebar" class="movebar"></div>
|
|
<div class="recommend-list" id="recommend-list"></div>
|
|
<div class="card node-form">
|
|
<h3>节点操作</h3>
|
|
<label>新增节点</label><input id="input-note-title">
|
|
<!-- 特殊节点面板:仅管理员可见(dnfs.js 按 /whoami is_admin 显示) -->
|
|
<div id="sp-panel" style="display:none">
|
|
<label>节点类型</label>
|
|
<select id="sp-type">
|
|
<option value="text">普通文本</option>
|
|
<option value="link">链接(自动显示站点图标)</option>
|
|
<option value="js">JS 代码(可审计/可运行)</option>
|
|
<option value="image">图片(自动显示)</option>
|
|
<option value="file">文件(可下载)</option>
|
|
</select>
|
|
<input type="file" id="sp-file" style="display:none">
|
|
<span id="sp-file-tip"></span>
|
|
</div>
|
|
<label>节点内容</label><textarea id="input-note-content"></textarea>
|
|
<div class="form-actions">
|
|
<button id="input-note-submit">提交</button>
|
|
<button id="input-note-clear">重置</button>
|
|
<button id="delete-note">删除当前节点</button>
|
|
</div>
|
|
</div>
|
|
<!-- <script src="https://cdnjs.cloudflare.com/ajax/libs/markdown-it/12.0.0/markdown-it.min.js"></script> -->
|
|
<!-- <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js"></script> -->
|
|
<script src="js/highlight_11_9_0.js"></script>
|
|
<script src="js/markdown-it-12_0_0.js"></script>
|
|
<script src="js/validation.js"></script>
|
|
<script src="js/token_manager.js"></script>
|
|
<script src="js/dnfs.js"></script>
|
|
</div>
|
|
<footer class="footer">
|
|
<a href="https://beian.miit.gov.cn/" target="_blank" rel="noopener">蜀ICP备2024107064号-2</a>
|
|
</footer>
|
|
</body>
|
|
</html>
|
|
|