forked from electricdusk/rushlink
36 lines
1.3 KiB
Cheetah
36 lines
1.3 KiB
Cheetah
{{define "title"}}
|
|
'{{.Paste.Key}}{{.FileExt}}' metadata - rushlink
|
|
{{end}}
|
|
|
|
{{define "body"}}
|
|
<pre>
|
|
<a href="{{.Host}}/{{.Paste.Key}}{{.FileExt}}">{{.Host}}/{{.Paste.Key}}{{.FileExt}}</a>
|
|
---
|
|
{{if and (ne .Paste.State.String "deleted") .CanDelete.Bool}}
|
|
with delete token: <a href="{{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}">{{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}</a>
|
|
{{else -}}
|
|
with delete token: <unknown>
|
|
{{end -}}
|
|
type: {{.Paste.Type}}
|
|
state: {{.Paste.State}}
|
|
{{if .Paste.TimeCreated.IsZero -}}
|
|
created: unknown
|
|
{{else -}}
|
|
created: {{.Paste.TimeCreated}}
|
|
{{end -}}
|
|
delete token: {{.CanDelete.String}}
|
|
|
|
{{if and (ne .Paste.State.String "deleted") .CanDelete.Bool}}
|
|
```
|
|
# To delete this {{.Paste.Type}}, execute:
|
|
{{- /*
|
|
We have the option here to take the deleteToken from the user request or
|
|
from .Paste. Both are equivalent as long as .CanDelete is correct. We
|
|
use the .Request value, because leaking the deleteToken would be a more
|
|
dramatic vulnerability.
|
|
*/}}
|
|
curl --request "DELETE" "<a href="{{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}">{{.Host}}/{{.Paste.Key}}{{.FileExt}}?deleteToken={{.Request.URL.Query.Get "deleteToken"}}"</a>
|
|
```
|
|
</pre>
|
|
{{end}}
|
|
{{end}} |