- internal/library/reader.go: new Chapter type and Service.ReadChapter/
ChapterAsset. Parses the EPUB spine, extracts and sanitizes each
chapter's <body> HTML using golang.org/x/net/html:
- strips <script>, <style>, <link>, <iframe>, <object>, <embed>,
<form>, <meta>, <base>, <audio>, <video>, <noscript> and any
on*-event-handler attributes
- rewrites relative <img>/xlink:href asset references to
/read/{id}/asset/{path}
- rewrites internal chapter links to /read/{id}/{spineIndex},
neutralizes javascript: hrefs, leaves external links untouched
- refactored CoverBytes to share the new findEPUBPath helper
- internal/web/handlers.go: GET /read/{id}/{idx} renders a chapter page
with prev/next navigation; GET /read/{id}/asset/{path...} serves
embedded chapter assets (images) with a size cap, mirroring the
existing cover-image guard
- views/pages.templ: new ReaderPage component (renders sanitized HTML
via templ.Raw); BookPage gets an "Im Browser lesen" button next to
the existing download button; templ regenerated
- static/styles.css: reader typography/layout, prev/next nav styling
- go.mod/go.sum: golang.org/x/net/html promoted to a direct dependency
- README: documents the new in-browser reader feature
Verified end-to-end with a hand-built test EPUB (spine ordering,
metadata, script/style stripping, event-handler stripping, chapter
link rewriting, image asset rewriting, javascript: neutralization,
external link passthrough, out-of-range chapter handling, and
path-traversal guard on chapter assets); test file removed afterwards
per repo convention (no test suite checked in yet).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- views/pages.templ: upload input now has "multiple" attribute; page
title/heading updated to plural ("Bücher hochladen"); templ regenerated
- internal/web/handlers.go: uploadSubmit now reads all files from
r.MultipartForm.File["book"] instead of a single r.FormFile, saving
each via a new saveUpload helper; partial failures are reported per
filename while successfully saved files are kept
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- static/styles.css: use CSS grid instead of inline-block for .book-list
so rows align consistently regardless of card content height; add
overflow-wrap/word-break to titles/authors
- views/pages.templ: truncate long titles/authors server-side
(truncateTitle helper) instead of relying on CSS line-clamp, which
behaved inconsistently across browsers (esp. Firefox with flex);
full title kept in title attribute and on the book detail page
- views/pages_templ.go regenerated via templ generate
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
arnefandCopilot
Arne