2023-04-20 14:36:34 +08:00
|
|
|
|
// 获取配置
|
|
|
|
|
const createConfig = safeRequire('uni-config-center')
|
2024-06-12 13:05:21 +08:00
|
|
|
|
const {QuillDeltaToHtmlConverter, QuillDeltaToJSONConverter} = safeRequire('quill-delta-converter')
|
2023-04-20 14:36:34 +08:00
|
|
|
|
const config = createConfig({
|
|
|
|
|
pluginId: 'uni-cms'
|
|
|
|
|
}).config()
|
|
|
|
|
|
|
|
|
|
// 获取数据库实例
|
|
|
|
|
const db = uniCloud.database()
|
|
|
|
|
|
|
|
|
|
// 文章数据库名称
|
|
|
|
|
const articleDBName = 'uni-cms-articles'
|
|
|
|
|
|
|
|
|
|
// 解锁内容数据库名称
|
|
|
|
|
const unlockContentDBName = 'uni-cms-unlock-record'
|
|
|
|
|
|
|
|
|
|
// 安全检测文本内容
|
|
|
|
|
async function checkContentSec(content, requestId, errorMsg) {
|
|
|
|
|
// 安全引入内容安全检测模块
|
|
|
|
|
const UniSecCheck = safeRequire('uni-sec-check')
|
|
|
|
|
// 创建内容安全检测实例
|
|
|
|
|
const uniSecCheck = new UniSecCheck({
|
|
|
|
|
provider: 'mp-weixin',
|
|
|
|
|
requestId
|
|
|
|
|
})
|
|
|
|
|
// 调用文本安全检测接口
|
|
|
|
|
const res = await uniSecCheck.textSecCheck({
|
|
|
|
|
content, // 待检测的文本内容
|
|
|
|
|
scene: 1, // 表示资料类场景
|
|
|
|
|
version: 1 // 调用检测API的版本号
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// 如果存在敏感词,抛出异常
|
|
|
|
|
if (res.errCode === uniSecCheck.ErrorCode.RISK_CONTENT) {
|
|
|
|
|
throw new Error(errorMsg || '存在敏感词,请修改后提交')
|
|
|
|
|
} else if (res.errCode !== 0) {
|
|
|
|
|
console.error(res)
|
|
|
|
|
throw new Error('内容安全检测异常:' + res.errCode)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 安全检测图片内容
|
|
|
|
|
async function checkImageSec(image, requestId, errorMsg) {
|
|
|
|
|
// 安全引入内容安全检测模块
|
|
|
|
|
const UniSecCheck = safeRequire('uni-sec-check')
|
|
|
|
|
// 创建内容安全检测实例
|
|
|
|
|
const uniSecCheck = new UniSecCheck({
|
|
|
|
|
provider: 'mp-weixin',
|
|
|
|
|
requestId
|
|
|
|
|
})
|
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
const images = typeof image === "string" ? [image]: image
|
2023-04-20 14:36:34 +08:00
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
for (let item of images) {
|
|
|
|
|
// 处理cloud://开头的链接
|
|
|
|
|
if (item.startsWith('cloud://')) {
|
|
|
|
|
const res = await uniCloud.getTempFileURL({
|
|
|
|
|
fileList: [item]
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
if (res.fileList && res.fileList.length > 0) {
|
|
|
|
|
item = res.fileList[0].tempFileURL
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 调用图片安全检测接口
|
|
|
|
|
const res = await uniSecCheck.imgSecCheck({
|
|
|
|
|
image: item, // 待检测的图片URL
|
|
|
|
|
scene: 1, // 表示资料类场景
|
|
|
|
|
version: 1 // 调用检测API的版本号
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// 如果存在违规内容,抛出异常
|
|
|
|
|
if (res.errCode === uniSecCheck.ErrorCode.RISK_CONTENT) {
|
|
|
|
|
throw new Error(errorMsg || '图片违规,请修改后提交')
|
|
|
|
|
} else if (res.errCode !== 0) {
|
|
|
|
|
console.error(res)
|
|
|
|
|
throw new Error('内容安全检测异常:' + res.errCode)
|
|
|
|
|
}
|
2023-04-20 14:36:34 +08:00
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 检测内容安全开关
|
|
|
|
|
function checkContentSecurityEnable(field) {
|
|
|
|
|
// 1. 从配置中心获取配置
|
|
|
|
|
return config.contentSecurity && config.contentSecurity.allowCheckType && config.contentSecurity.allowCheckType.includes(field)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 安全require
|
|
|
|
|
function safeRequire(module) {
|
|
|
|
|
try {
|
|
|
|
|
return require(module)
|
|
|
|
|
} catch (e) {
|
|
|
|
|
if (e.code === 'MODULE_NOT_FOUND') {
|
|
|
|
|
throw new Error(`${module} 公共模块不存在,请在 uniCloud/database 目录右击"配置schema扩展公共模块"添加 ${module} 模块`)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
module.exports = {
|
|
|
|
|
trigger: {
|
|
|
|
|
// 创建文章前触发
|
2023-04-21 15:38:12 +08:00
|
|
|
|
beforeCreate: async function ({clientInfo, addDataList}) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
// addDataList 是一个数组,因为可以一次性创建多条数据
|
|
|
|
|
if (addDataList.length <= 0) return
|
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
// 检测内容安全开关
|
|
|
|
|
const allowCheckContent = checkContentSecurityEnable('content')
|
|
|
|
|
const allowCheckImage = checkContentSecurityEnable('image')
|
|
|
|
|
|
2023-04-20 14:36:34 +08:00
|
|
|
|
// 遍历数组,对每一条数据进行安全检测
|
|
|
|
|
for (const addData of addDataList) {
|
|
|
|
|
// 如果是草稿,不检测
|
|
|
|
|
if (addData.article_status !== 1) continue
|
|
|
|
|
|
|
|
|
|
// 并行检测
|
|
|
|
|
const parallel = []
|
|
|
|
|
// 检测标题
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && addData.title) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(addData.title, clientInfo.requestId, '标题存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测摘要
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && addData.excerpt) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(addData.excerpt, clientInfo.requestId, '摘要存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测内容
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && addData.content) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(JSON.stringify(addData.content), clientInfo.requestId, '内容存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测封面图
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckImage && addData.thumbnail) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkImageSec(addData.thumbnail, clientInfo.requestId, '封面图存在违规,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 等待所有并行检测完成
|
|
|
|
|
await Promise.all(parallel)
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
// 更新文章前触发
|
2023-04-21 15:38:12 +08:00
|
|
|
|
beforeUpdate: async function ({clientInfo, where, updateData}) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
const id = where && where._id
|
|
|
|
|
|
|
|
|
|
if (!id) return
|
|
|
|
|
|
|
|
|
|
// 如果是草稿,不检测
|
|
|
|
|
if (updateData.article_status !== 1) return
|
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
// 检测内容安全开关
|
|
|
|
|
const allowCheckContent = checkContentSecurityEnable('content')
|
|
|
|
|
const allowCheckImage = checkContentSecurityEnable('image')
|
|
|
|
|
|
2023-04-20 14:36:34 +08:00
|
|
|
|
// 并行检测
|
|
|
|
|
const parallel = []
|
|
|
|
|
|
|
|
|
|
// 检测标题
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && updateData.title) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(updateData.title, clientInfo.requestId, '标题存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测摘要
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && updateData.excerpt) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(updateData.excerpt, clientInfo.requestId, '摘要存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测内容
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckContent && updateData.content) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkContentSec(JSON.stringify(updateData.content), clientInfo.requestId, '内容存在敏感字,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
// 检测封面图
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (allowCheckImage && updateData.thumbnail) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
parallel.push(checkImageSec(updateData.thumbnail, clientInfo.requestId, '封面图存在违规,请修改后提交'))
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 等待所有并行检测完成
|
|
|
|
|
await Promise.all(parallel)
|
|
|
|
|
|
|
|
|
|
},
|
2024-06-12 13:05:21 +08:00
|
|
|
|
// 读取文章后触发
|
2023-04-21 15:38:12 +08:00
|
|
|
|
afterRead: async function ({userInfo, clientInfo, result, where, field}) {
|
2024-06-12 14:44:59 +08:00
|
|
|
|
const isAdmin = field && field.length && field.includes('is_admin')
|
2023-04-20 14:36:34 +08:00
|
|
|
|
// 检查是否配置了clientAppIds字段,如果没有则抛出错误
|
2024-06-12 15:27:26 +08:00
|
|
|
|
if ((!config.clientAppIds || !config.clientAppIds.length) && !isAdmin) {
|
2023-04-20 14:36:34 +08:00
|
|
|
|
throw new Error('请在 uni-cms 配置文件中配置 clientAppIds 字段后访问,详见:https://uniapp.dcloud.net.cn/uniCloud/uni-cms.html#uni-cms-config')
|
|
|
|
|
}
|
|
|
|
|
|
2024-06-25 20:34:40 +08:00
|
|
|
|
if (isAdmin && config.clientAppIds && config.clientAppIds.includes(clientInfo.appId)) {
|
|
|
|
|
throw new Error('uni-cms 配置文件中的 clientAppIds 字段请勿添加管理端的 appid,请移除后重试')
|
|
|
|
|
}
|
|
|
|
|
|
2023-04-20 14:36:34 +08:00
|
|
|
|
// 如果clientAppIds字段未配置或当前appId不在clientAppIds中,则返回
|
|
|
|
|
if (!config.clientAppIds || !config.clientAppIds.includes(clientInfo.appId)) return
|
|
|
|
|
|
|
|
|
|
// 获取广告配置
|
|
|
|
|
const adConfig = config.adConfig || {}
|
|
|
|
|
|
|
|
|
|
// 获取文章id
|
|
|
|
|
const id = where && where._id
|
|
|
|
|
|
|
|
|
|
// 如果id不存在或者field不包含content,则返回
|
|
|
|
|
if (id && field.includes('content')) {
|
|
|
|
|
// 读取了content字段后view_count加1
|
|
|
|
|
await db.collection(articleDBName).where(where).update({
|
|
|
|
|
view_count: db.command.inc(1)
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 如果查询结果为空,则返回
|
|
|
|
|
if (!result.data || result.data.length <= 0) return
|
|
|
|
|
|
|
|
|
|
// 获取文章
|
|
|
|
|
const article = result.data[0]
|
|
|
|
|
|
|
|
|
|
// 如果文章内容不存在,则返回
|
|
|
|
|
if (!article.content) return
|
|
|
|
|
|
|
|
|
|
let needUnlock = false
|
|
|
|
|
let unlockContent = []
|
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
// 获取文章内容中的图片
|
|
|
|
|
article.content_images = article.content.ops.reduce((imageBlocks, block) => {
|
|
|
|
|
if (!block.insert.image) return imageBlocks
|
|
|
|
|
|
|
|
|
|
const {attributes} = block
|
|
|
|
|
const {'data-custom': custom = ""} = attributes || {}
|
|
|
|
|
const parseCustom = custom.split('&').reduce((obj, item) => {
|
|
|
|
|
const [key, value] = item.split('=')
|
|
|
|
|
obj[key] = value
|
|
|
|
|
return obj
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
return imageBlocks.concat(
|
|
|
|
|
parseCustom.source ||
|
|
|
|
|
block.insert.image
|
|
|
|
|
)
|
|
|
|
|
}, [])
|
|
|
|
|
|
2023-04-20 14:36:34 +08:00
|
|
|
|
for (const op of article.content.ops) {
|
|
|
|
|
unlockContent.push(op)
|
2024-06-12 13:05:21 +08:00
|
|
|
|
// 遍历文章内容,找到解锁内容
|
2023-04-20 14:36:34 +08:00
|
|
|
|
if (op.insert.unlockContent) {
|
|
|
|
|
needUnlock = true
|
|
|
|
|
break
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 如果文章不需要解锁,则返回
|
2024-06-12 13:05:21 +08:00
|
|
|
|
if (!needUnlock) {
|
|
|
|
|
article.content = getRenderableArticleContent(article.content, clientInfo)
|
|
|
|
|
return
|
|
|
|
|
}
|
2023-04-20 14:36:34 +08:00
|
|
|
|
|
|
|
|
|
// 获取唯一标识符
|
|
|
|
|
const uniqueId = adConfig.watchAdUniqueType === 'user' ? userInfo.uid : clientInfo.deviceId
|
|
|
|
|
|
|
|
|
|
// 如果未登录或者文章未解锁,则返回解锁内容
|
|
|
|
|
if (!uniqueId || !article._id) {
|
2024-06-12 13:05:21 +08:00
|
|
|
|
article.content = getRenderableArticleContent({
|
2023-04-20 14:36:34 +08:00
|
|
|
|
ops: unlockContent
|
2024-06-12 13:05:21 +08:00
|
|
|
|
}, clientInfo)
|
2023-04-20 14:36:34 +08:00
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 查询解锁记录
|
|
|
|
|
const unlockRecord = await db.collection(unlockContentDBName).where({
|
|
|
|
|
unique_id: uniqueId,
|
|
|
|
|
article_id: article._id
|
|
|
|
|
}).get()
|
|
|
|
|
|
|
|
|
|
// 如果未解锁,则返回解锁内容
|
|
|
|
|
if (unlockRecord.data && unlockRecord.data.length <= 0) {
|
2024-06-12 13:05:21 +08:00
|
|
|
|
article.content = getRenderableArticleContent({
|
2023-04-20 14:36:34 +08:00
|
|
|
|
ops: unlockContent
|
2024-06-12 13:05:21 +08:00
|
|
|
|
}, clientInfo)
|
2023-04-20 14:36:34 +08:00
|
|
|
|
return
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 将文章解锁替换为行结束符 \n
|
2024-06-12 13:05:21 +08:00
|
|
|
|
article.content = getRenderableArticleContent({
|
2023-04-20 14:36:34 +08:00
|
|
|
|
ops: article.content.ops.map(op => {
|
|
|
|
|
if (op.insert.unlockContent) {
|
|
|
|
|
op.insert = "\n"
|
|
|
|
|
}
|
|
|
|
|
return op
|
|
|
|
|
})
|
2024-06-12 13:05:21 +08:00
|
|
|
|
}, clientInfo)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function getRenderableArticleContent (rawArticleContent, clientInfo) {
|
|
|
|
|
const isUniAppX = /uni-app-x/i.test(clientInfo.userAgent)
|
|
|
|
|
|
|
|
|
|
if (!isUniAppX) {
|
|
|
|
|
const quillDeltaConverter = new QuillDeltaToJSONConverter(rawArticleContent.ops)
|
|
|
|
|
return quillDeltaConverter.convert()
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
const deltaOps = []
|
|
|
|
|
|
|
|
|
|
for (let i = 0; i < rawArticleContent.ops.length; i++) {
|
|
|
|
|
const op = rawArticleContent.ops[i]
|
|
|
|
|
|
|
|
|
|
if (typeof op.insert === 'object') {
|
|
|
|
|
const insertType = Object.keys(op.insert)
|
|
|
|
|
const blockRenderList = ['image', 'divider', 'unlockContent', 'mediaVideo']
|
|
|
|
|
if (insertType && insertType.length > 0 && blockRenderList.includes(insertType[0])) {
|
|
|
|
|
deltaOps.push({
|
|
|
|
|
type: insertType[0],
|
|
|
|
|
ops: [op]
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// 一般块级节点后面都跟一个换行,需要把这个换行给去掉
|
|
|
|
|
const nextOps = rawArticleContent.ops[i + 1]
|
|
|
|
|
if (nextOps && nextOps.insert === '\n') {
|
|
|
|
|
i ++
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
continue
|
2023-04-20 14:36:34 +08:00
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2024-06-12 13:05:21 +08:00
|
|
|
|
const currentIndex = deltaOps.length > 0 ? deltaOps.length - 1: 0
|
|
|
|
|
if (
|
|
|
|
|
typeof deltaOps[currentIndex] !== "object" ||
|
|
|
|
|
(deltaOps[currentIndex] && deltaOps[currentIndex].type !== 'rich-text')
|
|
|
|
|
) {
|
|
|
|
|
deltaOps.push({
|
|
|
|
|
type: 'rich-text',
|
|
|
|
|
ops: []
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
deltaOps[deltaOps.length - 1].ops.push(op)
|
2023-04-20 14:36:34 +08:00
|
|
|
|
}
|
2024-06-12 13:05:21 +08:00
|
|
|
|
|
|
|
|
|
return deltaOps.reduce((content, item) => {
|
|
|
|
|
const isRichText = item.type === 'rich-text'
|
|
|
|
|
let block = {
|
|
|
|
|
type: item.type,
|
|
|
|
|
data: isRichText ? item.ops: item.ops[0]
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (item.type === 'rich-text') {
|
|
|
|
|
const lastOp = item.ops.length > 0 ? item.ops[item.ops.length - 1]: null
|
|
|
|
|
|
|
|
|
|
if (lastOp !== null && lastOp.insert === "\n") {
|
|
|
|
|
item.ops.pop()
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
const quillDeltaConverter = new QuillDeltaToHtmlConverter(item.ops)
|
|
|
|
|
|
|
|
|
|
block.data = quillDeltaConverter.convert()
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return content.concat(block)
|
|
|
|
|
}, [])
|
2023-04-20 14:36:34 +08:00
|
|
|
|
}
|