From b3f98de1da11e13dea5c08af4f80520258c120cf Mon Sep 17 00:00:00 2001
From: Simon Ser <contact@emersion.fr>
Date: Tue, 25 Feb 2020 16:13:10 +0100
Subject: plugins/viewhtml: add opt-in query param to load remote resources

Loading remote resources by default has privacy implications.
---
 themes/sourcehut/message.html | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'themes')

diff --git a/themes/sourcehut/message.html b/themes/sourcehut/message.html
index fb38932..17f5976 100644
--- a/themes/sourcehut/message.html
+++ b/themes/sourcehut/message.html
@@ -99,6 +99,13 @@
         {{end}}
       </ul>
 
+      {{if and .Extra.HasRemoteResources (not .Extra.RemoteResourcesAllowed)}}
+        <p class="alert alert-info">
+          This message contains remote content.
+          <a href="?part={{.PartPath}}&allow-remote-resources=1" class="alert-link">Load</a>
+        </p>
+      {{end}}
+
       {{if .View}}
         {{.View}}
       {{else}}
-- 
cgit v1.2.3