56ebef4352
Fixes: * Sanitize user-provided content in HTML (Fixes #2193) * Fix encoding of search query in prev/next pages (Fixes #2229) * Fix some issues introduced with #2196: - Fix alignment of all <h3> elements (Move the inline style from the parent to the <h3> element) - Add missing comma on 'dir' HTML attribute (Typo introduced by PR #2196) Code cleaning: * Remove unnecessary 'each_sclice' + 'each' double loop in ECR files * Clean the player's <source> list generation code (in player.ecr)
55 lines
2.1 KiB
Plaintext
55 lines
2.1 KiB
Plaintext
<% content_for "header" do %>
|
|
<title><%= translate(locale, "Subscription manager") %> - Invidious</title>
|
|
<% end %>
|
|
|
|
<div class="pure-g h-box">
|
|
<div class="pure-u-1-3">
|
|
<h3>
|
|
<a href="/feed/subscriptions">
|
|
<%= translate(locale, "`x` subscriptions", %(<span id="count">#{subscriptions.size}</span>)) %>
|
|
</a>
|
|
</h3>
|
|
</div>
|
|
<div class="pure-u-1-3">
|
|
<h3 style="text-align:center">
|
|
<a href="/feed/history">
|
|
<%= translate(locale, "Watch history") %>
|
|
</a>
|
|
</h3>
|
|
</div>
|
|
<div class="pure-u-1-3">
|
|
<h3 style="text-align:right">
|
|
<a href="/data_control?referer=<%= URI.encode_www_form(referer) %>">
|
|
<%= translate(locale, "Import/export") %>
|
|
</a>
|
|
</h3>
|
|
</div>
|
|
</div>
|
|
|
|
<% subscriptions.each do |channel| %>
|
|
<div class="h-box">
|
|
<div class="pure-g<% if channel.deleted %> deleted <% end %>">
|
|
<div class="pure-u-2-5">
|
|
<h3 style="padding-left:0.5em">
|
|
<a href="/channel/<%= channel.id %>"><%= HTML.escape(channel.author) %></a>
|
|
</h3>
|
|
</div>
|
|
<div class="pure-u-2-5"></div>
|
|
<div class="pure-u-1-5" style="text-align:right">
|
|
<h3 style="padding-right:0.5em">
|
|
<form data-onsubmit="return_false" action="/subscription_ajax?action_remove_subscriptions=1&c=<%= channel.id %>&referer=<%= env.get("current_page") %>" method="post">
|
|
<input type="hidden" name="csrf_token" value="<%= URI.encode_www_form(env.get?("csrf_token").try &.as(String) || "") %>">
|
|
<a data-onclick="remove_subscription" data-ucid="<%= channel.id %>" href="#">
|
|
<input style="all:unset" type="submit" value="<%= translate(locale, "unsubscribe") %>">
|
|
</a>
|
|
</form>
|
|
</h3>
|
|
</div>
|
|
</div>
|
|
|
|
<% if subscriptions[-1].author != channel.author %>
|
|
<hr>
|
|
<% end %>
|
|
</div>
|
|
<% end %>
|