forked from electricdusk/rushlink
28 lines
957 B
Cheetah
28 lines
957 B
Cheetah
{{.Host}}/{{.Paste.Key}}{{.FileExt}}
|
|
---
|
|
{{if and (ne .Paste.State.String "deleted") .CanDelete.Bool}}
|
|
with delete token: {{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}
|
|
{{else -}}
|
|
with delete token: <unknown>
|
|
{{end -}}type: {{.Paste.Type}}
|
|
state: {{.Paste.State}}
|
|
{{if .Paste.TimeCreated.IsZero -}}
|
|
created: unknown
|
|
{{else -}}
|
|
created: {{.Paste.TimeCreated}}
|
|
{{end -}}
|
|
delete token: {{.CanDelete.String}}
|
|
|
|
{{if and (ne .Paste.State.String "deleted") .CanDelete.Bool}}
|
|
```
|
|
# To delete this {{.Paste.Type}}, execute:
|
|
{{- /*
|
|
We have the option here to take the deleteToken from the user request or
|
|
from .Paste. Both are equivalent as long as .CanDelete is correct. We
|
|
use the .Request value, because leaking the deleteToken would be a more
|
|
dramatic vulnerability.
|
|
*/ -}}
|
|
curl --request "DELETE" "{{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}"
|
|
```
|
|
{{end}}
|