From cb28560dcfd30386dfec7a209ae85f904b4c8985 Mon Sep 17 00:00:00 2001
From: Laura Hausmann <laura@hausmann.dev>
Date: Sat, 5 Oct 2024 20:36:56 +0200
Subject: [PATCH] [backend/razor] Improve public preview embeds (ISH-512)

Sensitive images are now not embedded. Image embeds now use the correct card type.
---
 .../Components/PublicPreview/Schemas/PreviewNote.cs         | 1 +
 Iceshrimp.Backend/Pages/NotePreview.razor                   | 6 ++++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/Iceshrimp.Backend/Components/PublicPreview/Schemas/PreviewNote.cs b/Iceshrimp.Backend/Components/PublicPreview/Schemas/PreviewNote.cs
index 76c99cf5..8e07ce45 100644
--- a/Iceshrimp.Backend/Components/PublicPreview/Schemas/PreviewNote.cs
+++ b/Iceshrimp.Backend/Components/PublicPreview/Schemas/PreviewNote.cs
@@ -21,4 +21,5 @@ public class PreviewAttachment
 	public required string  Url;
 	public required string  Name;
 	public required string? Alt;
+	public required bool    Sensitive;
 }
\ No newline at end of file
diff --git a/Iceshrimp.Backend/Pages/NotePreview.razor b/Iceshrimp.Backend/Pages/NotePreview.razor
index 37684a97..3d69080c 100644
--- a/Iceshrimp.Backend/Pages/NotePreview.razor
+++ b/Iceshrimp.Backend/Pages/NotePreview.razor
@@ -61,11 +61,13 @@ else
     <PageTitle>Note by @@@_note.User.Username - @_instanceName</PageTitle>
     <HeadContent>
         @{
+            var cardType        = "summary";
             var previewImageUrl = _note.User.AvatarUrl;
             if (ShowMedia && _note.Attachments != null)
             {
-                if (_note.Attachments.FirstOrDefault(p => p.MimeType.StartsWith("image/")) is { } img)
+                if (_note.Attachments.FirstOrDefault(p => p.MimeType.StartsWith("image/") && !p.Sensitive) is { } img)
                 {
+                    cardType        = "summary_large_image";
                     previewImageUrl = img.Url;
                 }
             }
@@ -93,7 +95,7 @@ else
             var title    = _note.User.RawDisplayName is { } name ? $"{name} (@{username})" : $"@{username}";
         }
 
-        <meta name="twitter:card" content="summary">
+        <meta name="twitter:card" content="@cardType">
         <meta name="og:site_name" content="@_instanceName">
         <meta name="og:title" content="@title">
         <meta name="og:image" content="@previewImageUrl">