brewlog/templates/pages/cafe.html
Jon Seager 920931ba17
refactor: fix template review findings (security, macros, tokens)
Address findings from the templates code review:

- Fix XSS in admin.html onclick handlers via data attributes
- Fix XSS in 5 edit page signal initializations via JSON serialization
- Fix register.html token exposure by moving to data attribute
- Add entity_icon, quick_notes_toggles, add_form_submit macros
- Replace hardcoded colors with design tokens (warning, error, success)
- Add warning design tokens to CSS theme
- Scope MutationObserver to main element
- Add defer to webauthn.js script tags
- Refactor login/register JS to arrow functions
- Guard lightbox script behind image_url check
- Fix else-if to elif in 5 templates
2026-02-13 16:20:30 +00:00

86 lines
2.9 KiB
HTML

{% extends "base.html" %}
{% import "partials/detail_cards.html" as detail %}
{% import "partials/icons.html" as icons %}
{% import "partials/image_section.html" as img %}
{% block title %}Brewlog · {{ cafe.name }}{% endblock %}
{% block og_title %}{{ cafe.name }} — Brewlog{% endblock %}
{% block og_description %}
{{ cafe.name }}
— {{ cafe.city }}, {{ cafe.country_flag }} {{ cafe.country }}
{% endblock %}
{% block head %}
<meta property="og:image" content="{{ base_url }}/static/og-image.png" />
{% endblock %}
{% block content %}
<header class="flex items-start justify-between gap-4">
<div class="flex items-center gap-4 min-w-0">
{{ img::image_thumbnail("cafe", cafe.id, image_url, is_authenticated) }}
<div class="flex flex-col gap-1 min-w-0">
<h1 class="text-2xl font-semibold truncate">{{ cafe.name }}</h1>
<p class="text-sm text-text-secondary">
<a
href="/data?type=cafes"
class="text-accent hover:text-accent-hover transition"
>Cafes</a
>
· {{ cafe.created_date }}
</p>
</div>
</div>
</header>
{% if image_url.is_some() %}
{{ img::lightbox_script() }}
{% endif %}
<div class="grid gap-6 md:grid-cols-2">
<div class="rounded-lg border bg-surface p-5">
<h2 class="text-lg font-semibold text-text mb-4">Details</h2>
<dl class="grid grid-cols-2 gap-x-4 gap-y-3 text-sm">
<div>
<dt class="text-text-muted">City</dt>
<dd class="font-medium text-text">{{ cafe.city }}</dd>
</div>
<div>
<dt class="text-text-muted">Country</dt>
<dd class="font-medium text-text">
{% if !cafe.country_flag.is_empty() %}
<span class="mr-1">{{ cafe.country_flag }}</span>
{% endif %}{{ cafe.country }}
</dd>
</div>
<div>
<dt class="text-text-muted">Location</dt>
<dd class="font-medium">
<a
href="{{ cafe.map_url }}"
target="_blank"
rel="noreferrer noopener"
class="text-accent hover:text-accent-hover transition"
>View on Map</a
>
</dd>
</div>
{% if let Some(url) = cafe.website %}
<div>
<dt class="text-text-muted">Website</dt>
<dd class="font-medium">
<a
href="{{ url }}"
target="_blank"
rel="noreferrer noopener"
class="text-accent hover:text-accent-hover transition"
>Visit Website</a
>
</dd>
</div>
{% endif %}
</dl>
</div>
{{ detail::map_with_legend(cafe.map_countries, cafe.map_max, cafe.legend_entries) }}
</div>
{% if is_authenticated %}
{{ detail::edit_delete_buttons(edit_url, "cafe", "/api/v1/cafes", cafe.id) }}
{% endif %}
{% endblock %}