runique 2.1.17

A Django-inspired web framework for Rust with ORM, templates, and comprehensive security middleware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

//! Regex for Tera tags in templates — `{% static %}`, `{% media %}`, `{% link %}`.
use regex::Regex;
use std::sync::LazyLock;

pub static BALISE_LINK: LazyLock<Regex> = LazyLock::new(|| {
    Regex::new(r#"(?P<q>["'])\{%\s*(?P<tag>static|media)\s*"(?P<link>[^"]+)"\s*%\}["']"#).unwrap()
});

/// Handles `{% media var %}` / `{% static var %}` with a Tera variable (no quotes).
pub static BALISE_LINK_VAR: LazyLock<Regex> = LazyLock::new(|| {
    Regex::new(r#"\{%\s*(?P<tag>static|media)\s+(?P<var>[a-zA-Z_][a-zA-Z0-9_.\[\]]*)\s*%}"#)
        .unwrap()
});

pub static LINK_REGEX: LazyLock<Regex> = LazyLock::new(|| {
    Regex::new(r#"\{%\s*link\s*['"](?P<name>[^'"]+)['"]\s*(?:,\s*)?(?P<params>[^%]*?)\s*%}"#)
        .unwrap()
});

pub static FORM_FIELD_REGEX: LazyLock<Regex> =
    LazyLock::new(|| Regex::new(r"\{%\s*form\.([a-zA-Z0-9_]+)\.([a-zA-Z0-9_]+)\s*%}").unwrap());

pub static FORM_FULL_REGEX: LazyLock<Regex> =
    LazyLock::new(|| Regex::new(r"\{%\s*form\.([a-zA-Z0-9_]+)\s*%}").unwrap());

pub static MARKDOWN_REGEX: LazyLock<Regex> =
    LazyLock::new(|| Regex::new(r"\{\{\s*([^|{}\n]+?)\s*\|\s*markdown\s*\}\}").unwrap());

/// Matches `{{ expr | sanitize }}` — re-sanitizes stored rich HTML at render time.
/// Rewritten to `{{ expr | sanitize | safe }}` so the (ammonia-cleaned) output is
/// emitted as HTML. Security is applied on output, never trusted from storage.
pub static SANITIZE_REGEX: LazyLock<Regex> =
    LazyLock::new(|| Regex::new(r"\{\{\s*([^|{}\n]+?)\s*\|\s*sanitize\s*\}\}").unwrap());

/// Matches `{{ form_fields.html }}` — Runique-generated HTML, never user input.
/// Rewrites to `{{ form_fields.html | safe }}` during template preprocessing.
pub static ADMIN_FORM_HTML_REGEX: LazyLock<Regex> =
    LazyLock::new(|| Regex::new(r"\{\{\s*form_fields\.html\s*\}\}").unwrap());