```
+
+````
+```
+var s = "Code block";
+alert(s);
+```
+````
+
+```
+var s = "Code block";
+alert(s);
+```
+
+
+
+## Tables
+
+```no-highlight
+Colons can be used to align columns.
+
+| Tables | Are | Cool |
+| ------------- |:-------------:| -----:|
+| col 3 is | right-aligned | $1600 |
+| col 2 is | centered | $12 |
+| zebra stripes | are neat | $1 |
+
+There must be at least 3 dashes separating each header cell.
+The outer pipes (|) are optional, and you don't need to make the
+raw Markdown line up prettily. You can also use inline Markdown.
+
+Markdown | Less | Pretty
+--- | --- | ---
+*Still* | `renders` | **nicely**
+1 | 2 | 3
+```
+
+Colons can be used to align columns.
+
+| Tables | Are | Cool |
+| ------------- |:-------------:| -----:|
+| col 3 is | right-aligned | $1600 |
+| col 2 is | centered | $12 |
+| zebra stripes | are neat | $1 |
+
+There must be at least 3 dashes separating each header cell. The outer pipes (|) are optional, and you don't need to make the raw Markdown line up prettily. You can also use inline Markdown.
+
+Markdown | Less | Pretty
+--- | --- | ---
+*Still* | `renders` | **nicely**
+1 | 2 | 3
+
+
+
+## Blockquotes
+
+```no-highlight
+> Blockquotes are very handy in email to emulate reply text.
+> This line is part of the same quote.
+
+Quote break.
+
+> This is a very long line that will still be quoted properly when it wraps. Oh boy let's keep writing to make sure this is long enough to actually wrap for everyone. Oh, you can *put* **Markdown** into a blockquote.
+```
+
+> Blockquotes are very handy in email to emulate reply text.
+> This line is part of the same quote.
+
+Quote break.
+
+> This is a very long line that will still be quoted properly when it wraps. Oh boy let's keep writing to make sure this is long enough to actually wrap for everyone. Oh, you can *put* **Markdown** into a blockquote.
+
+
+
+## Inline HTML
+
+You can also use raw HTML in your Markdown, and it'll mostly work pretty well.
+
+```no-highlight
+-
+
- Definition list +
- Is something people use sometimes. + +
- Markdown in HTML +
- Does *not* work **very** well. Use HTML tags. +
-
+
- Definition list +
- Is something people use sometimes. + +
- Markdown in HTML +
- Does *not* work **very** well. Use HTML tags. +
"+tn+"
",1);default:return o(tn,0)}}}function U(tn){tn&&tn()}function a(tn,en){return Object.prototype.toString.call(tn)==="[object "+en+"]"}function f(tn){return a(tn,"Function")}function g(tn){return a(tn,"Object")}function j(tn){var en="htmx-internal-data",nn=tn[en];return nn||(nn=tn[en]={}),nn}function p(tn){var en=[];if(tn)for(var nn=0;nn"+tn+"
",1);default:return o(tn,0)}}}function U(tn){tn&&tn()}function a(tn,en){return Object.prototype.toString.call(tn)==="[object "+en+"]"}function f(tn){return a(tn,"Function")}function g(tn){return a(tn,"Object")}function j(tn){var en="htmx-internal-data",nn=tn[en];return nn||(nn=tn[en]={}),nn}function p(tn){var en=[];if(tn)for(var nn=0;nn',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:[0,0],container:!1,fallbackPlacements:["top","right","bottom","left"],boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:hx,popperConfig:null},Ex={HIDE:`hide${ii}`,HIDDEN:`hidden${ii}`,SHOW:`show${ii}`,SHOWN:`shown${ii}`,INSERTED:`inserted${ii}`,CLICK:`click${ii}`,FOCUSIN:`focusin${ii}`,FOCUSOUT:`focusout${ii}`,MOUSEENTER:`mouseenter${ii}`,MOUSELEAVE:`mouseleave${ii}`},Ia="fade",Eh="modal",Ts="show",Os="show",Lc="out",_x=".tooltip-inner",As="hover",Dc="focus",Sx="click",wx="manual",oi=class extends Gr{constructor(en,nn){if(typeof _a=="undefined")throw new TypeError("Bootstrap's tooltips require Popper (https://popper.js.org)");super(en);this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this._config=this._getConfig(nn),this.tip=null,this._setListeners()}static get Default(){return yx}static get NAME(){return bh}static get Event(){return Ex}static get DefaultType(){return vx}enable(){this._isEnabled=!0}disable(){this._isEnabled=!1}toggleEnabled(){this._isEnabled=!this._isEnabled}toggle(en){if(!!this._isEnabled)if(en){let nn=this._initializeOnDelegatedTarget(en);nn._activeTrigger.click=!nn._activeTrigger.click,nn._isWithActiveTrigger()?nn._enter(null,nn):nn._leave(null,nn)}else{if(this.getTipElement().classList.contains(Ts)){this._leave(null,this);return}this._enter(null,this)}}dispose(){clearTimeout(this._timeout),Mn.off(this._element.closest(`.${Eh}`),"hide.bs.modal",this._hideModalHandler),this.tip&&this.tip.remove(),this._popper&&this._popper.destroy(),super.dispose()}show(){if(this._element.style.display==="none")throw new Error("Please use show on visible elements");if(!(this.isWithContent()&&this._isEnabled))return;let en=Mn.trigger(this._element,this.constructor.Event.SHOW),nn=wd(this._element),rn=nn===null?this._element.ownerDocument.documentElement.contains(this._element):nn.contains(this._element);if(en.defaultPrevented||!rn)return;let on=this.getTipElement(),an=Ed(this.constructor.NAME);on.setAttribute("id",an),this._element.setAttribute("aria-describedby",an),this.setContent(),this._config.animation&&on.classList.add(Ia);let ln=typeof this._config.placement=="function"?this._config.placement.call(this,on,this._element):this._config.placement,cn=this._getAttachment(ln);this._addAttachmentClass(cn);let{container:dn}=this._config;lo.set(on,this.constructor.DATA_KEY,this),this._element.ownerDocument.documentElement.contains(this.tip)||(dn.appendChild(on),Mn.trigger(this._element,this.constructor.Event.INSERTED)),this._popper?this._popper.update():this._popper=Ea(this._element,on,this._getPopperConfig(cn)),on.classList.add(Ts);let fn=typeof this._config.customClass=="function"?this._config.customClass():this._config.customClass;fn&&on.classList.add(...fn.split(" ")),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(hn=>{Mn.on(hn,"mouseover",wa)});let un=()=>{let hn=this._hoverState;this._hoverState=null,Mn.trigger(this._element,this.constructor.Event.SHOWN),hn===Lc&&this._leave(null,this)},gn=this.tip.classList.contains(Ia);this._queueCallback(un,this.tip,gn)}hide(){if(!this._popper)return;let en=this.getTipElement(),nn=()=>{this._isWithActiveTrigger()||(this._hoverState!==Os&&en.remove(),this._cleanTipClass(),this._element.removeAttribute("aria-describedby"),Mn.trigger(this._element,this.constructor.Event.HIDDEN),this._popper&&(this._popper.destroy(),this._popper=null))};if(Mn.trigger(this._element,this.constructor.Event.HIDE).defaultPrevented)return;en.classList.remove(Ts),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(an=>Mn.off(an,"mouseover",wa)),this._activeTrigger[Sx]=!1,this._activeTrigger[Dc]=!1,this._activeTrigger[As]=!1;let on=this.tip.classList.contains(Ia);this._queueCallback(nn,this.tip,on),this._hoverState=""}update(){this._popper!==null&&this._popper.update()}isWithContent(){return Boolean(this.getTitle())}getTipElement(){if(this.tip)return this.tip;let en=document.createElement("div");return en.innerHTML=this._config.template,this.tip=en.children[0],this.tip}setContent(){let en=this.getTipElement();this.setElementContent(Vn.findOne(_x,en),this.getTitle()),en.classList.remove(Ia,Ts)}setElementContent(en,nn){if(en!==null){if(qi(nn)){nn=Bo(nn),this._config.html?nn.parentNode!==en&&(en.innerHTML="",en.appendChild(nn)):en.textContent=nn.textContent;return}this._config.html?(this._config.sanitize&&(nn=vh(nn,this._config.allowList,this._config.sanitizeFn)),en.innerHTML=nn):en.textContent=nn}}getTitle(){let en=this._element.getAttribute("data-bs-original-title");return en||(en=typeof this._config.title=="function"?this._config.title.call(this._element):this._config.title),en}updateAttachment(en){return en==="right"?"end":en==="left"?"start":en}_initializeOnDelegatedTarget(en,nn){let rn=this.constructor.DATA_KEY;return nn=nn||lo.get(en.delegateTarget,rn),nn||(nn=new this.constructor(en.delegateTarget,this._getDelegateConfig()),lo.set(en.delegateTarget,rn,nn)),nn}_getOffset(){let{offset:en}=this._config;return typeof en=="string"?en.split(",").map(nn=>Number.parseInt(nn,10)):typeof en=="function"?nn=>en(nn,this._element):en}_getPopperConfig(en){let nn={placement:en,modifiers:[{name:"flip",options:{fallbackPlacements:this._config.fallbackPlacements}},{name:"offset",options:{offset:this._getOffset()}},{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"arrow",options:{element:`.${this.constructor.NAME}-arrow`}},{name:"onChange",enabled:!0,phase:"afterWrite",fn:rn=>this._handlePopperPlacementChange(rn)}],onFirstUpdate:rn=>{rn.options.placement!==rn.placement&&this._handlePopperPlacementChange(rn)}};return Jn(Jn({},nn),typeof this._config.popperConfig=="function"?this._config.popperConfig(nn):this._config.popperConfig)}_addAttachmentClass(en){this.getTipElement().classList.add(`${yh}-${this.updateAttachment(en)}`)}_getAttachment(en){return bx[en.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(nn=>{if(nn==="click")Mn.on(this._element,this.constructor.Event.CLICK,this._config.selector,rn=>this.toggle(rn));else if(nn!==wx){let rn=nn===As?this.constructor.Event.MOUSEENTER:this.constructor.Event.FOCUSIN,on=nn===As?this.constructor.Event.MOUSELEAVE:this.constructor.Event.FOCUSOUT;Mn.on(this._element,rn,this._config.selector,an=>this._enter(an)),Mn.on(this._element,on,this._config.selector,an=>this._leave(an))}}),this._hideModalHandler=()=>{this._element&&this.hide()},Mn.on(this._element.closest(`.${Eh}`),"hide.bs.modal",this._hideModalHandler),this._config.selector?this._config=ca(Jn({},this._config),{trigger:"manual",selector:""}):this._fixTitle()}_fixTitle(){let en=this._element.getAttribute("title"),nn=typeof this._element.getAttribute("data-bs-original-title");(en||nn!=="string")&&(this._element.setAttribute("data-bs-original-title",en||""),en&&!this._element.getAttribute("aria-label")&&!this._element.textContent&&this._element.setAttribute("aria-label",en),this._element.setAttribute("title",""))}_enter(en,nn){if(nn=this._initializeOnDelegatedTarget(en,nn),en&&(nn._activeTrigger[en.type==="focusin"?Dc:As]=!0),nn.getTipElement().classList.contains(Ts)||nn._hoverState===Os){nn._hoverState=Os;return}if(clearTimeout(nn._timeout),nn._hoverState=Os,!nn._config.delay||!nn._config.delay.show){nn.show();return}nn._timeout=setTimeout(()=>{nn._hoverState===Os&&nn.show()},nn._config.delay.show)}_leave(en,nn){if(nn=this._initializeOnDelegatedTarget(en,nn),en&&(nn._activeTrigger[en.type==="focusout"?Dc:As]=nn._element.contains(en.relatedTarget)),!nn._isWithActiveTrigger()){if(clearTimeout(nn._timeout),nn._hoverState=Lc,!nn._config.delay||!nn._config.delay.hide){nn.hide();return}nn._timeout=setTimeout(()=>{nn._hoverState===Lc&&nn.hide()},nn._config.delay.hide)}}_isWithActiveTrigger(){for(let en in this._activeTrigger)if(this._activeTrigger[en])return!0;return!1}_getConfig(en){let nn=Or.getDataAttributes(this._element);return Object.keys(nn).forEach(rn=>{gx.has(rn)&&delete nn[rn]}),en=Jn(Jn(Jn({},this.constructor.Default),nn),typeof en=="object"&&en?en:{}),en.container=en.container===!1?document.body:Bo(en.container),typeof en.delay=="number"&&(en.delay={show:en.delay,hide:en.delay}),typeof en.title=="number"&&(en.title=en.title.toString()),typeof en.content=="number"&&(en.content=en.content.toString()),wi(bh,en,this.constructor.DefaultType),en.sanitize&&(en.template=vh(en.template,en.allowList,en.sanitizeFn)),en}_getDelegateConfig(){let en={};if(this._config)for(let nn in this._config)this.constructor.Default[nn]!==this._config[nn]&&(en[nn]=this._config[nn]);return en}_cleanTipClass(){let en=this.getTipElement(),nn=en.getAttribute("class").match(mx);nn!==null&&nn.length>0&&nn.map(rn=>rn.trim()).forEach(rn=>en.classList.remove(rn))}_handlePopperPlacementChange(en){let{state:nn}=en;!nn||(this.tip=nn.elements.popper,this._cleanTipClass(),this._addAttachmentClass(this._getAttachment(nn.placement)))}static jQueryInterface(en){return this.each(function(){let nn=oi.getOrCreateInstance(this,en);if(typeof en=="string"){if(typeof nn[en]=="undefined")throw new TypeError(`No method named "${en}"`);nn[en]()}})}};Kr(oi);var xx="popover",Tx="bs.popover",si=`.${Tx}`,_h="bs-popover",Ox=new RegExp(`(^|\\s)${_h}\\S+`,"g"),Ax=ca(Jn({},oi.Default),{placement:"right",offset:[0,8],trigger:"click",content:"",template:'
'}),Cx=ca(Jn({},oi.DefaultType),{content:"(string|element|function)"}),Lx={HIDE:`hide${si}`,HIDDEN:`hidden${si}`,SHOW:`show${si}`,SHOWN:`shown${si}`,INSERTED:`inserted${si}`,CLICK:`click${si}`,FOCUSIN:`focusin${si}`,FOCUSOUT:`focusout${si}`,MOUSEENTER:`mouseenter${si}`,MOUSELEAVE:`mouseleave${si}`},Dx="fade",Mx="show",Sh=".popover-header",wh=".popover-body",go=class extends oi{static get Default(){return Ax}static get NAME(){return xx}static get Event(){return Lx}static get DefaultType(){return Cx}isWithContent(){return this.getTitle()||this._getContent()}getTipElement(){return this.tip?this.tip:(this.tip=super.getTipElement(),this.getTitle()||Vn.findOne(Sh,this.tip).remove(),this._getContent()||Vn.findOne(wh,this.tip).remove(),this.tip)}setContent(){let en=this.getTipElement();this.setElementContent(Vn.findOne(Sh,en),this.getTitle());let nn=this._getContent();typeof nn=="function"&&(nn=nn.call(this._element)),this.setElementContent(Vn.findOne(wh,en),nn),en.classList.remove(Dx,Mx)}_addAttachmentClass(en){this.getTipElement().classList.add(`${_h}-${this.updateAttachment(en)}`)}_getContent(){return this._element.getAttribute("data-bs-content")||this._config.content}_cleanTipClass(){let en=this.getTipElement(),nn=en.getAttribute("class").match(Ox);nn!==null&&nn.length>0&&nn.map(rn=>rn.trim()).forEach(rn=>en.classList.remove(rn))}static jQueryInterface(en){return this.each(function(){let nn=go.getOrCreateInstance(this,en);if(typeof en=="string"){if(typeof nn[en]=="undefined")throw new TypeError(`No method named "${en}"`);nn[en]()}})}};Kr(go);var Mc="scrollspy",Ix="bs.scrollspy",Pa=`.${Ix}`,Px=".data-api",xh={offset:10,method:"auto",target:""},kx={offset:"number",method:"string",target:"(string|element)"},Nx=`activate${Pa}`,Rx=`scroll${Pa}`,jx=`load${Pa}${Px}`,Th="dropdown-item",vo="active",qx='[data-bs-spy="scroll"]',Hx=".nav, .list-group",Ic=".nav-link",Bx=".nav-item",Oh=".list-group-item",Fx=".dropdown",$x=".dropdown-toggle",zx="offset",Ah="position",Cs=class extends Gr{constructor(en,nn){super(en);this._scrollElement=this._element.tagName==="BODY"?window:this._element,this._config=this._getConfig(nn),this._selector=`${this._config.target} ${Ic}, ${this._config.target} ${Oh}, ${this._config.target} .${Th}`,this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,Mn.on(this._scrollElement,Rx,()=>this._process()),this.refresh(),this._process()}static get Default(){return xh}static get NAME(){return Mc}refresh(){let en=this._scrollElement===this._scrollElement.window?zx:Ah,nn=this._config.method==="auto"?en:this._config.method,rn=nn===Ah?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),Vn.find(this._selector).map(an=>{let ln=mc(an),cn=ln?Vn.findOne(ln):null;if(cn){let dn=cn.getBoundingClientRect();if(dn.width||dn.height)return[Or[nn](cn).top+rn,ln]}return null}).filter(an=>an).sort((an,ln)=>an[0]-ln[0]).forEach(an=>{this._offsets.push(an[0]),this._targets.push(an[1])})}dispose(){Mn.off(this._scrollElement,Pa),super.dispose()}_getConfig(en){if(en=Jn(Jn(Jn({},xh),Or.getDataAttributes(this._element)),typeof en=="object"&&en?en:{}),typeof en.target!="string"&&qi(en.target)){let{id:nn}=en.target;nn||(nn=Ed(Mc),en.target.id=nn),en.target=`#${nn}`}return wi(Mc,en,kx),en}_getScrollTop(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop}_getScrollHeight(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)}_getOffsetHeight(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height}_process(){let en=this._getScrollTop()+this._config.offset,nn=this._getScrollHeight(),rn=this._config.offset+nn-this._getOffsetHeight();if(this._scrollHeight!==nn&&this.refresh(),en>=rn){let on=this._targets[this._targets.length-1];this._activeTarget!==on&&this._activate(on);return}if(this._activeTarget&&en
',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:[0,0],container:!1,fallbackPlacements:["top","right","bottom","left"],boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:vx,popperConfig:null},xx={HIDE:`hide${ii}`,HIDDEN:`hidden${ii}`,SHOW:`show${ii}`,SHOWN:`shown${ii}`,INSERTED:`inserted${ii}`,CLICK:`click${ii}`,FOCUSIN:`focusin${ii}`,FOCUSOUT:`focusout${ii}`,MOUSEENTER:`mouseenter${ii}`,MOUSELEAVE:`mouseleave${ii}`},ka="fade",Eh="modal",Os="show",Cs="show",Lc="out",Tx=".tooltip-inner",As="hover",Dc="focus",Ox="click",Cx="manual",oi=class extends Gr{constructor(en,nn){if(typeof Sa=="undefined")throw new TypeError("Bootstrap's tooltips require Popper (https://popper.js.org)");super(en);this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this._config=this._getConfig(nn),this.tip=null,this._setListeners()}static get Default(){return wx}static get NAME(){return bh}static get Event(){return xx}static get DefaultType(){return _x}enable(){this._isEnabled=!0}disable(){this._isEnabled=!1}toggleEnabled(){this._isEnabled=!this._isEnabled}toggle(en){if(!!this._isEnabled)if(en){let nn=this._initializeOnDelegatedTarget(en);nn._activeTrigger.click=!nn._activeTrigger.click,nn._isWithActiveTrigger()?nn._enter(null,nn):nn._leave(null,nn)}else{if(this.getTipElement().classList.contains(Os)){this._leave(null,this);return}this._enter(null,this)}}dispose(){clearTimeout(this._timeout),Mn.off(this._element.closest(`.${Eh}`),"hide.bs.modal",this._hideModalHandler),this.tip&&this.tip.remove(),this._popper&&this._popper.destroy(),super.dispose()}show(){if(this._element.style.display==="none")throw new Error("Please use show on visible elements");if(!(this.isWithContent()&&this._isEnabled))return;let en=Mn.trigger(this._element,this.constructor.Event.SHOW),nn=wd(this._element),rn=nn===null?this._element.ownerDocument.documentElement.contains(this._element):nn.contains(this._element);if(en.defaultPrevented||!rn)return;let on=this.getTipElement(),an=Ed(this.constructor.NAME);on.setAttribute("id",an),this._element.setAttribute("aria-describedby",an),this.setContent(),this._config.animation&&on.classList.add(ka);let ln=typeof this._config.placement=="function"?this._config.placement.call(this,on,this._element):this._config.placement,cn=this._getAttachment(ln);this._addAttachmentClass(cn);let{container:dn}=this._config;lo.set(on,this.constructor.DATA_KEY,this),this._element.ownerDocument.documentElement.contains(this.tip)||(dn.appendChild(on),Mn.trigger(this._element,this.constructor.Event.INSERTED)),this._popper?this._popper.update():this._popper=_a(this._element,on,this._getPopperConfig(cn)),on.classList.add(Os);let fn=typeof this._config.customClass=="function"?this._config.customClass():this._config.customClass;fn&&on.classList.add(...fn.split(" ")),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(hn=>{Mn.on(hn,"mouseover",xa)});let un=()=>{let hn=this._hoverState;this._hoverState=null,Mn.trigger(this._element,this.constructor.Event.SHOWN),hn===Lc&&this._leave(null,this)},gn=this.tip.classList.contains(ka);this._queueCallback(un,this.tip,gn)}hide(){if(!this._popper)return;let en=this.getTipElement(),nn=()=>{this._isWithActiveTrigger()||(this._hoverState!==Cs&&en.remove(),this._cleanTipClass(),this._element.removeAttribute("aria-describedby"),Mn.trigger(this._element,this.constructor.Event.HIDDEN),this._popper&&(this._popper.destroy(),this._popper=null))};if(Mn.trigger(this._element,this.constructor.Event.HIDE).defaultPrevented)return;en.classList.remove(Os),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(an=>Mn.off(an,"mouseover",xa)),this._activeTrigger[Ox]=!1,this._activeTrigger[Dc]=!1,this._activeTrigger[As]=!1;let on=this.tip.classList.contains(ka);this._queueCallback(nn,this.tip,on),this._hoverState=""}update(){this._popper!==null&&this._popper.update()}isWithContent(){return Boolean(this.getTitle())}getTipElement(){if(this.tip)return this.tip;let en=document.createElement("div");return en.innerHTML=this._config.template,this.tip=en.children[0],this.tip}setContent(){let en=this.getTipElement();this.setElementContent(Vn.findOne(Tx,en),this.getTitle()),en.classList.remove(ka,Os)}setElementContent(en,nn){if(en!==null){if(qi(nn)){nn=Bo(nn),this._config.html?nn.parentNode!==en&&(en.innerHTML="",en.appendChild(nn)):en.textContent=nn.textContent;return}this._config.html?(this._config.sanitize&&(nn=vh(nn,this._config.allowList,this._config.sanitizeFn)),en.innerHTML=nn):en.textContent=nn}}getTitle(){let en=this._element.getAttribute("data-bs-original-title");return en||(en=typeof this._config.title=="function"?this._config.title.call(this._element):this._config.title),en}updateAttachment(en){return en==="right"?"end":en==="left"?"start":en}_initializeOnDelegatedTarget(en,nn){let rn=this.constructor.DATA_KEY;return nn=nn||lo.get(en.delegateTarget,rn),nn||(nn=new this.constructor(en.delegateTarget,this._getDelegateConfig()),lo.set(en.delegateTarget,rn,nn)),nn}_getOffset(){let{offset:en}=this._config;return typeof en=="string"?en.split(",").map(nn=>Number.parseInt(nn,10)):typeof en=="function"?nn=>en(nn,this._element):en}_getPopperConfig(en){let nn={placement:en,modifiers:[{name:"flip",options:{fallbackPlacements:this._config.fallbackPlacements}},{name:"offset",options:{offset:this._getOffset()}},{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"arrow",options:{element:`.${this.constructor.NAME}-arrow`}},{name:"onChange",enabled:!0,phase:"afterWrite",fn:rn=>this._handlePopperPlacementChange(rn)}],onFirstUpdate:rn=>{rn.options.placement!==rn.placement&&this._handlePopperPlacementChange(rn)}};return Jn(Jn({},nn),typeof this._config.popperConfig=="function"?this._config.popperConfig(nn):this._config.popperConfig)}_addAttachmentClass(en){this.getTipElement().classList.add(`${yh}-${this.updateAttachment(en)}`)}_getAttachment(en){return Sx[en.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(nn=>{if(nn==="click")Mn.on(this._element,this.constructor.Event.CLICK,this._config.selector,rn=>this.toggle(rn));else if(nn!==Cx){let rn=nn===As?this.constructor.Event.MOUSEENTER:this.constructor.Event.FOCUSIN,on=nn===As?this.constructor.Event.MOUSELEAVE:this.constructor.Event.FOCUSOUT;Mn.on(this._element,rn,this._config.selector,an=>this._enter(an)),Mn.on(this._element,on,this._config.selector,an=>this._leave(an))}}),this._hideModalHandler=()=>{this._element&&this.hide()},Mn.on(this._element.closest(`.${Eh}`),"hide.bs.modal",this._hideModalHandler),this._config.selector?this._config=ua(Jn({},this._config),{trigger:"manual",selector:""}):this._fixTitle()}_fixTitle(){let en=this._element.getAttribute("title"),nn=typeof this._element.getAttribute("data-bs-original-title");(en||nn!=="string")&&(this._element.setAttribute("data-bs-original-title",en||""),en&&!this._element.getAttribute("aria-label")&&!this._element.textContent&&this._element.setAttribute("aria-label",en),this._element.setAttribute("title",""))}_enter(en,nn){if(nn=this._initializeOnDelegatedTarget(en,nn),en&&(nn._activeTrigger[en.type==="focusin"?Dc:As]=!0),nn.getTipElement().classList.contains(Os)||nn._hoverState===Cs){nn._hoverState=Cs;return}if(clearTimeout(nn._timeout),nn._hoverState=Cs,!nn._config.delay||!nn._config.delay.show){nn.show();return}nn._timeout=setTimeout(()=>{nn._hoverState===Cs&&nn.show()},nn._config.delay.show)}_leave(en,nn){if(nn=this._initializeOnDelegatedTarget(en,nn),en&&(nn._activeTrigger[en.type==="focusout"?Dc:As]=nn._element.contains(en.relatedTarget)),!nn._isWithActiveTrigger()){if(clearTimeout(nn._timeout),nn._hoverState=Lc,!nn._config.delay||!nn._config.delay.hide){nn.hide();return}nn._timeout=setTimeout(()=>{nn._hoverState===Lc&&nn.hide()},nn._config.delay.hide)}}_isWithActiveTrigger(){for(let en in this._activeTrigger)if(this._activeTrigger[en])return!0;return!1}_getConfig(en){let nn=Or.getDataAttributes(this._element);return Object.keys(nn).forEach(rn=>{Ex.has(rn)&&delete nn[rn]}),en=Jn(Jn(Jn({},this.constructor.Default),nn),typeof en=="object"&&en?en:{}),en.container=en.container===!1?document.body:Bo(en.container),typeof en.delay=="number"&&(en.delay={show:en.delay,hide:en.delay}),typeof en.title=="number"&&(en.title=en.title.toString()),typeof en.content=="number"&&(en.content=en.content.toString()),wi(bh,en,this.constructor.DefaultType),en.sanitize&&(en.template=vh(en.template,en.allowList,en.sanitizeFn)),en}_getDelegateConfig(){let en={};if(this._config)for(let nn in this._config)this.constructor.Default[nn]!==this._config[nn]&&(en[nn]=this._config[nn]);return en}_cleanTipClass(){let en=this.getTipElement(),nn=en.getAttribute("class").match(yx);nn!==null&&nn.length>0&&nn.map(rn=>rn.trim()).forEach(rn=>en.classList.remove(rn))}_handlePopperPlacementChange(en){let{state:nn}=en;!nn||(this.tip=nn.elements.popper,this._cleanTipClass(),this._addAttachmentClass(this._getAttachment(nn.placement)))}static jQueryInterface(en){return this.each(function(){let nn=oi.getOrCreateInstance(this,en);if(typeof en=="string"){if(typeof nn[en]=="undefined")throw new TypeError(`No method named "${en}"`);nn[en]()}})}};Kr(oi);var Ax="popover",Lx="bs.popover",si=`.${Lx}`,_h="bs-popover",Dx=new RegExp(`(^|\\s)${_h}\\S+`,"g"),Mx=ua(Jn({},oi.Default),{placement:"right",offset:[0,8],trigger:"click",content:"",template:'
'}),Ix=ua(Jn({},oi.DefaultType),{content:"(string|element|function)"}),kx={HIDE:`hide${si}`,HIDDEN:`hidden${si}`,SHOW:`show${si}`,SHOWN:`shown${si}`,INSERTED:`inserted${si}`,CLICK:`click${si}`,FOCUSIN:`focusin${si}`,FOCUSOUT:`focusout${si}`,MOUSEENTER:`mouseenter${si}`,MOUSELEAVE:`mouseleave${si}`},Px="fade",Nx="show",Sh=".popover-header",wh=".popover-body",go=class extends oi{static get Default(){return Mx}static get NAME(){return Ax}static get Event(){return kx}static get DefaultType(){return Ix}isWithContent(){return this.getTitle()||this._getContent()}getTipElement(){return this.tip?this.tip:(this.tip=super.getTipElement(),this.getTitle()||Vn.findOne(Sh,this.tip).remove(),this._getContent()||Vn.findOne(wh,this.tip).remove(),this.tip)}setContent(){let en=this.getTipElement();this.setElementContent(Vn.findOne(Sh,en),this.getTitle());let nn=this._getContent();typeof nn=="function"&&(nn=nn.call(this._element)),this.setElementContent(Vn.findOne(wh,en),nn),en.classList.remove(Px,Nx)}_addAttachmentClass(en){this.getTipElement().classList.add(`${_h}-${this.updateAttachment(en)}`)}_getContent(){return this._element.getAttribute("data-bs-content")||this._config.content}_cleanTipClass(){let en=this.getTipElement(),nn=en.getAttribute("class").match(Dx);nn!==null&&nn.length>0&&nn.map(rn=>rn.trim()).forEach(rn=>en.classList.remove(rn))}static jQueryInterface(en){return this.each(function(){let nn=go.getOrCreateInstance(this,en);if(typeof en=="string"){if(typeof nn[en]=="undefined")throw new TypeError(`No method named "${en}"`);nn[en]()}})}};Kr(go);var Mc="scrollspy",Rx="bs.scrollspy",Pa=`.${Rx}`,jx=".data-api",xh={offset:10,method:"auto",target:""},qx={offset:"number",method:"string",target:"(string|element)"},Hx=`activate${Pa}`,Bx=`scroll${Pa}`,Fx=`load${Pa}${jx}`,Th="dropdown-item",vo="active",$x='[data-bs-spy="scroll"]',zx=".nav, .list-group",Ic=".nav-link",Wx=".nav-item",Oh=".list-group-item",Vx=".dropdown",Ux=".dropdown-toggle",Yx="offset",Ch="position",Ls=class extends Gr{constructor(en,nn){super(en);this._scrollElement=this._element.tagName==="BODY"?window:this._element,this._config=this._getConfig(nn),this._selector=`${this._config.target} ${Ic}, ${this._config.target} ${Oh}, ${this._config.target} .${Th}`,this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,Mn.on(this._scrollElement,Bx,()=>this._process()),this.refresh(),this._process()}static get Default(){return xh}static get NAME(){return Mc}refresh(){let en=this._scrollElement===this._scrollElement.window?Yx:Ch,nn=this._config.method==="auto"?en:this._config.method,rn=nn===Ch?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),Vn.find(this._selector).map(an=>{let ln=mc(an),cn=ln?Vn.findOne(ln):null;if(cn){let dn=cn.getBoundingClientRect();if(dn.width||dn.height)return[Or[nn](cn).top+rn,ln]}return null}).filter(an=>an).sort((an,ln)=>an[0]-ln[0]).forEach(an=>{this._offsets.push(an[0]),this._targets.push(an[1])})}dispose(){Mn.off(this._scrollElement,Pa),super.dispose()}_getConfig(en){if(en=Jn(Jn(Jn({},xh),Or.getDataAttributes(this._element)),typeof en=="object"&&en?en:{}),typeof en.target!="string"&&qi(en.target)){let{id:nn}=en.target;nn||(nn=Ed(Mc),en.target.id=nn),en.target=`#${nn}`}return wi(Mc,en,qx),en}_getScrollTop(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop}_getScrollHeight(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)}_getOffsetHeight(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height}_process(){let en=this._getScrollTop()+this._config.offset,nn=this._getScrollHeight(),rn=this._config.offset+nn-this._getOffsetHeight();if(this._scrollHeight!==nn&&this.refresh(),en>=rn){let on=this._targets[this._targets.length-1];this._activeTarget!==on&&this._activate(on);return}if(this._activeTarget&&en
Site time: {% timezone object.time_zone %}{% annotated_now %}{% endtimezone %} {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -94,7 +94,7 @@ {{ object.physical_address|linebreaksbr }} {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -113,7 +113,7 @@ {{ object.latitude }}, {{ object.longitude }} {% else %} - — + {{ ''|placeholder }} {% endif %} diff --git a/netbox/templates/dcim/virtualchassis_edit.html b/netbox/templates/dcim/virtualchassis_edit.html index 327f20531..275391c61 100644 --- a/netbox/templates/dcim/virtualchassis_edit.html +++ b/netbox/templates/dcim/virtualchassis_edit.html @@ -57,7 +57,7 @@ {% if device.rack %} {{ device.rack }} / {{ device.position }} {% else %} - — + {{ ''|placeholder }} {% endif %}
{{ object.validation_regex }}
{% else %}
- —
+ {{ ''|placeholder }}
{% endif %}
diff --git a/netbox/templates/extras/htmx/report_result.html b/netbox/templates/extras/htmx/report_result.html
index 9b3e9db5f..c20bf5fe2 100644
--- a/netbox/templates/extras/htmx/report_result.html
+++ b/netbox/templates/extras/htmx/report_result.html
@@ -57,7 +57,7 @@
{% elif obj %}
{{ obj }}
{% else %}
- —
+ {{ ''|placeholder }}
{% endif %}
{{ field.to_field_name }}
{% else %}
- —
+ {{ ''|placeholder }}
{% endif %}
{% empty %} - None + {{ ''|placeholder }} {% endfor %} diff --git a/netbox/templates/ipam/vlan.html b/netbox/templates/ipam/vlan.html index f74149ad6..fd0ba36a3 100644 --- a/netbox/templates/ipam/vlan.html +++ b/netbox/templates/ipam/vlan.html @@ -21,7 +21,7 @@ {% endif %} {{ object.site|linkify }} {% else %} - None + {{ ''|placeholder }} {% endif %} @@ -56,7 +56,7 @@ {% if object.role %} {{ object.role }} {% else %} - None + {{ ''|placeholder }} {% endif %} diff --git a/netbox/templates/tenancy/contact.html b/netbox/templates/tenancy/contact.html index f55e87895..8e71628e9 100644 --- a/netbox/templates/tenancy/contact.html +++ b/netbox/templates/tenancy/contact.html @@ -35,7 +35,7 @@ {% if object.phone %} {{ object.phone }} {% else %} - None + {{ ''|placeholder }} {% endif %} @@ -45,7 +45,7 @@ {% if object.email %} {{ object.email }} {% else %} - None + {{ ''|placeholder }} {% endif %} diff --git a/netbox/templates/users/profile.html b/netbox/templates/users/profile.html index 112603126..913784c94 100644 --- a/netbox/templates/users/profile.html +++ b/netbox/templates/users/profile.html @@ -21,7 +21,7 @@ {% if request.user.first_name or request.user.last_name %} {{ request.user.first_name }} {{ request.user.last_name }} {% else %} - — + {{ ''|placeholder }} {% endif %} diff --git a/netbox/templates/virtualization/virtualmachine.html b/netbox/templates/virtualization/virtualmachine.html index 2831a452a..f62da6fed 100644 --- a/netbox/templates/virtualization/virtualmachine.html +++ b/netbox/templates/virtualization/virtualmachine.html @@ -49,7 +49,7 @@ (NAT: {{ object.primary_ip4.nat_outside.address.ip }}) {% endif %} {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -64,7 +64,7 @@ (NAT: {{ object.primary_ip6.nat_outside.address.ip }}) {% endif %} {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -123,7 +123,7 @@ {% if object.memory %} {{ object.memory|humanize_megabytes }} {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -133,7 +133,7 @@ {% if object.disk %} {{ object.disk }} GB {% else %} - — + {{ ''|placeholder }} {% endif %} diff --git a/netbox/templates/wireless/inc/wirelesslink_interface.html b/netbox/templates/wireless/inc/wirelesslink_interface.html index db4f84f0a..7732816a7 100644 --- a/netbox/templates/wireless/inc/wirelesslink_interface.html +++ b/netbox/templates/wireless/inc/wirelesslink_interface.html @@ -33,7 +33,7 @@ {% if interface.rf_channel_frequency %} {{ interface.rf_channel_frequency|simplify_decimal }} MHz {% else %} - — + {{ ''|placeholder }} {% endif %} @@ -43,7 +43,7 @@ {% if interface.rf_channel_width %} {{ interface.rf_channel_width|simplify_decimal }} MHz {% else %} - — + {{ ''|placeholder }} {% endif %} diff --git a/netbox/utilities/forms/fields/fields.py b/netbox/utilities/forms/fields/fields.py index 0d09d2ac7..9168189a1 100644 --- a/netbox/utilities/forms/fields/fields.py +++ b/netbox/utilities/forms/fields/fields.py @@ -3,6 +3,7 @@ import json from django import forms from django.db.models import Count from django.forms.fields import JSONField as _JSONField, InvalidJSONInput +from django.templatetags.static import static from netaddr import AddrFormatError, EUI from utilities.forms import widgets @@ -26,10 +27,9 @@ class CommentField(forms.CharField): A textarea with support for Markdown rendering. Exists mostly just to add a standard `help_text`. """ widget = forms.Textarea - # TODO: Port Markdown cheat sheet to internal documentation - help_text = """ + help_text = f""" - + Markdown syntax is supported """ diff --git a/netbox/utilities/templatetags/builtins/filters.py b/netbox/utilities/templatetags/builtins/filters.py index 44ad5ac47..738dc0e00 100644 --- a/netbox/utilities/templatetags/builtins/filters.py +++ b/netbox/utilities/templatetags/builtins/filters.py @@ -11,7 +11,7 @@ from markdown import markdown from netbox.config import get_config from utilities.markdown import StrikethroughExtension -from utilities.utils import foreground_color +from utilities.utils import clean_html, foreground_color register = template.Library() @@ -144,18 +144,6 @@ def render_markdown(value): {{ md_source_text|markdown }} """ - schemes = '|'.join(get_config().ALLOWED_URL_SCHEMES) - - # Strip HTML tags - value = strip_tags(value) - - # Sanitize Markdown links - pattern = fr'\[([^\]]+)\]\(\s*(?!({schemes})).*:(.+)\)' - value = re.sub(pattern, '[\\1](\\3)', value, flags=re.IGNORECASE) - - # Sanitize Markdown reference links - pattern = fr'\[([^\]]+)\]:\s*(?!({schemes}))\w*:(.+)' - value = re.sub(pattern, '[\\1]: \\3', value, flags=re.IGNORECASE) # Render Markdown html = markdown(value, extensions=['def_list', 'fenced_code', 'tables', StrikethroughExtension()]) @@ -164,6 +152,11 @@ def render_markdown(value): if html: html = f'
{html}
'
+ schemes = get_config().ALLOWED_URL_SCHEMES
+
+ # Sanitize HTML
+ html = clean_html(html, schemes)
+
return mark_safe(html)
diff --git a/netbox/utilities/utils.py b/netbox/utilities/utils.py
index 7b37c0b70..2b939471c 100644
--- a/netbox/utilities/utils.py
+++ b/netbox/utilities/utils.py
@@ -4,6 +4,7 @@ from collections import OrderedDict
from decimal import Decimal
from itertools import count, groupby
+import bleach
from django.core.serializers import serialize
from django.db.models import Count, OuterRef, Subquery
from django.db.models.functions import Coalesce
@@ -14,6 +15,7 @@ from mptt.models import MPTTModel
from dcim.choices import CableLengthUnitChoices
from extras.plugins import PluginConfig
from extras.utils import is_taggable
+from netbox.config import get_config
from utilities.constants import HTTP_REQUEST_META_SAFE_COPY
@@ -257,7 +259,9 @@ def render_jinja2(template_code, context):
"""
Render a Jinja2 template with the provided context. Return the rendered content.
"""
- return SandboxedEnvironment().from_string(source=template_code).render(**context)
+ environment = SandboxedEnvironment()
+ environment.filters.update(get_config().JINJA2_FILTERS)
+ return environment.from_string(source=template_code).render(**context)
def prepare_cloned_fields(instance):
@@ -382,3 +386,33 @@ def copy_safe_request(request):
'path': request.path,
'id': getattr(request, 'id', None), # UUID assigned by middleware
})
+
+
+def clean_html(html, schemes):
+ """
+ Sanitizes HTML based on a whitelist of allowed tags and attributes.
+ Also takes a list of allowed URI schemes.
+ """
+
+ ALLOWED_TAGS = [
+ "div", "pre", "code", "blockquote", "del",
+ "hr", "h1", "h2", "h3", "h4", "h5", "h6",
+ "ul", "ol", "li", "p", "br",
+ "strong", "em", "a", "b", "i", "img",
+ "table", "thead", "tbody", "tr", "th", "td",
+ "dl", "dt", "dd",
+ ]
+
+ ALLOWED_ATTRIBUTES = {
+ "div": ['class'],
+ "h1": ["id"], "h2": ["id"], "h3": ["id"], "h4": ["id"], "h5": ["id"], "h6": ["id"],
+ "a": ["href", "title"],
+ "img": ["src", "title", "alt"],
+ }
+
+ return bleach.clean(
+ html,
+ tags=ALLOWED_TAGS,
+ attributes=ALLOWED_ATTRIBUTES,
+ protocols=schemes
+ )
diff --git a/netbox/virtualization/forms/bulk_edit.py b/netbox/virtualization/forms/bulk_edit.py
index 88dee3978..b2429744b 100644
--- a/netbox/virtualization/forms/bulk_edit.py
+++ b/netbox/virtualization/forms/bulk_edit.py
@@ -3,7 +3,7 @@ from django import forms
from dcim.choices import InterfaceModeChoices
from dcim.constants import INTERFACE_MTU_MAX, INTERFACE_MTU_MIN
from dcim.models import Device, DeviceRole, Platform, Region, Site, SiteGroup
-from ipam.models import VLAN, VRF
+from ipam.models import VLAN, VLANGroup, VRF
from netbox.forms import NetBoxModelBulkEditForm
from tenancy.models import Tenant
from utilities.forms import (
@@ -202,13 +202,26 @@ class VMInterfaceBulkEditForm(NetBoxModelBulkEditForm):
required=False,
widget=StaticSelect()
)
+ vlan_group = DynamicModelChoiceField(
+ queryset=VLANGroup.objects.all(),
+ required=False,
+ label='VLAN group'
+ )
untagged_vlan = DynamicModelChoiceField(
queryset=VLAN.objects.all(),
- required=False
+ required=False,
+ query_params={
+ 'group_id': '$vlan_group',
+ },
+ label='Untagged VLAN'
)
tagged_vlans = DynamicModelMultipleChoiceField(
queryset=VLAN.objects.all(),
- required=False
+ required=False,
+ query_params={
+ 'group_id': '$vlan_group',
+ },
+ label='Tagged VLANs'
)
vrf = DynamicModelChoiceField(
queryset=VRF.objects.all(),
@@ -220,7 +233,7 @@ class VMInterfaceBulkEditForm(NetBoxModelBulkEditForm):
fieldsets = (
(None, ('mtu', 'enabled', 'vrf', 'description')),
('Related Interfaces', ('parent', 'bridge')),
- ('802.1Q Switching', ('mode', 'untagged_vlan', 'tagged_vlans')),
+ ('802.1Q Switching', ('mode', 'vlan_group', 'untagged_vlan', 'tagged_vlans')),
)
nullable_fields = (
'parent', 'bridge', 'mtu', 'vrf', 'description',
diff --git a/netbox/virtualization/forms/models.py b/netbox/virtualization/forms/models.py
index cfafd7e39..018b50c99 100644
--- a/netbox/virtualization/forms/models.py
+++ b/netbox/virtualization/forms/models.py
@@ -323,7 +323,7 @@ class VMInterfaceForm(InterfaceCommonForm, NetBoxModelForm):
model = VMInterface
fields = [
'virtual_machine', 'name', 'parent', 'bridge', 'enabled', 'mac_address', 'mtu', 'description', 'mode',
- 'untagged_vlan', 'tagged_vlans', 'vrf', 'tags',
+ 'vlan_group', 'untagged_vlan', 'tagged_vlans', 'vrf', 'tags',
]
widgets = {
'virtual_machine': forms.HiddenInput(),
diff --git a/requirements.txt b/requirements.txt
index 1def8e23e..d5b86eafa 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,7 +1,8 @@
-Django==4.0.4
-django-cors-headers==3.12.0
-django-debug-toolbar==3.2.4
-django-filter==21.1
+bleach==5.0.0
+Django==4.0.5
+django-cors-headers==3.13.0
+django-debug-toolbar==3.4.0
+django-filter==22.1
django-graphiql-debug-toolbar==0.2.0
django-mptt==0.13.4
django-pglocks==1.0.4
@@ -19,7 +20,7 @@ gunicorn==20.1.0
Jinja2==3.1.2
Markdown==3.3.7
markdown-include==0.6.0
-mkdocs-material==8.2.16
+mkdocs-material==8.3.6
mkdocstrings[python-legacy]==0.19.0
netaddr==0.8.0
Pillow==9.1.1
@@ -27,7 +28,7 @@ psycopg2-binary==2.9.3
PyYAML==6.0
sentry-sdk==1.5.12
social-auth-app-django==5.0.0
-social-auth-core==4.2.0
+social-auth-core==4.3.0
svgwrite==1.4.2
tablib==3.2.1
tzdata==2022.1