fix: lock down legacy HTML handling

Co-authored-by: lazyparser <1802104+lazyparser@users.noreply.github.com>

Author: Copilot

themes/osdt-tech/assets/css/main.css

@@ -28,6 +28,7 @@ a:hover { color: #b6f4ff; }
   position: fixed; inset: 0; pointer-events: none; opacity: .16;
   background-image: linear-gradient(rgba(110,231,255,.08) 1px, transparent 1px), linear-gradient(90deg, rgba(110,231,255,.08) 1px, transparent 1px);
   background-size: 36px 36px;
+  -webkit-mask-image: linear-gradient(to bottom, rgba(0,0,0,.65), transparent 92%);
   mask-image: linear-gradient(to bottom, rgba(0,0,0,.65), transparent 92%);
 }
 .shell { width: min(1120px, calc(100% - 32px)); margin: 0 auto; }

themes/osdt-tech/layouts/_default/home.html

@@ -1,12 +1,13 @@
 {{ define "main" }}
 {{ $pages := .Site.RegularPages }}
-{{ $readmeCategory := .Site.Params.readmeHistoryCategory }}
-{{ $eventCategory := .Site.Params.eventCategory }}
 {{ $readmePages := where $pages "Type" "readme-history" }}
 {{ $articlePages := where $pages "Type" "ne" "readme-history" }}
 {{ $recent := first 6 (sort $articlePages "Date" "desc") }}
+{{ $events := slice }}
+{{ with .Site.Params.eventCategory }}
+  {{ $events = where $articlePages "Params.categories" "intersect" (slice .) }}
+{{ end }}
 {{ $updates := first 4 (sort $readmePages "Date" "desc") }}
-{{ $events := where $articlePages "Params.categories" "intersect" (slice $eventCategory) }}
 <section class="hero shell">
   <div class="hero-copy">
     <p class="eyebrow">Hugo · Tech Blog · Community Archive</p>

themes/osdt-tech/layouts/_default/list.html

@@ -6,7 +6,7 @@ <h1>{{ .Title }}</h1>
     {{ with .Content }}<div class="page-copy">{{ . }}</div>{{ end }}
   </header>
   {{ $pages := .RegularPagesRecursive }}
-  {{ if eq .RelPermalink "/posts/" }}
+  {{ if eq .Section "posts" }}
     {{ $pages = where $pages "Type" "ne" "readme-history" }}
   {{ end }}
   {{ if gt (len $pages) 0 }}

themes/osdt-tech/layouts/shortcodes/rawhtml.html

@@ -1 +1,6 @@
-{{ .Inner | safeHTML }}
+{{- $html := trim .Inner "\n\r\t " -}}
+{{- $isIframe := gt (len (findRE `(?s)^<iframe[\s\S]*</iframe>$` $html)) 0 -}}
+{{- $isTable := gt (len (findRE `(?s)^<table[\s\S]*</table>$` $html)) 0 -}}
+{{- if or $isIframe $isTable -}}
+{{ $html | safeHTML }}
+{{- end -}}