source: Klonkt/src/views/pages/authorize-interaction.ejs@ aedc00d

main
Last change on this file since aedc00d was f7d142f, checked in by Robin Genis <roboburr@…>, 2 months ago

chore(csp): drop the last script unsafe-inline + add Permissions-Policy

Move every inline on* handler to a shared delegated data-* handler, so script-src-attr
can be 'none' instead of 'unsafe-inline'. Add a Permissions-Policy header disabling
camera/microphone/geolocation/Topics (embed features left at default).

  • views/shell.ejs — shared delegated submit/change/click/error handler (data-confirm, data-autosubmit, data-lang-switch, data-selectall, data-back, data-fallback)
  • views/{pages,partials}/*.ejs — 18 inline on* handlers -> data-* attributes (14 files)
  • server.js — scriptSrcAttr 'unsafe-inline' -> 'none'; Permissions-Policy header
  • Property mode set to 100644
File size: 20.3 KB
Line 
1<div class="auth-interact">
2 <% if (typeof manage !== 'undefined' && manage) { %>
3 <%- include('../partials/fedi-tabs', { active: 'reacties' }) %>
4 <h1 class="auth-interact-title"><%= t('fedi.manage_title') %></h1>
5
6 <%# Interact bookmarklet — drag to bookmarks bar, then click on any fediverse post. %>
7 <div class="fedi-bm">
8 <a class="fedi-bm-btn" id="fedi-bm-btn" href="#" draggable="true" title="<%= t('fedi.bm_help') %>">
9 <svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M19 21l-7-5-7 5V5a2 2 0 0 1 2-2h10a2 2 0 0 1 2 2z"/></svg>
10 <%= t('fedi.bm_label') %>
11 </a>
12 <p class="fedi-bm-help"><%= t('fedi.bm_help') %></p>
13 </div>
14 <script>
15 (function () {
16 if (window.__fediBmWired) return; window.__fediBmWired = true;
17 var a = document.getElementById('fedi-bm-btn'); if (!a) return;
18 a.setAttribute('href', "javascript:void(window.open('" + location.origin + "/authorize_interaction?uri='+encodeURIComponent(window.location.href)))");
19 a.addEventListener('click', function (e) { e.preventDefault(); a.classList.add('nudge'); setTimeout(function(){ a.classList.remove('nudge'); }, 600); });
20 })();
21 </script>
22 <% if (!manage.length) { %>
23 <p class="auth-interact-note"><%= t('fedi.manage_empty') %></p>
24 <% } else { %>
25 <ul class="fedi-manage">
26 <% manage.forEach(function(m){ %>
27 <li class="fedi-manage-item">
28 <div class="fedi-manage-head">
29 <span class="fedi-manage-icon" aria-hidden="true"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="9 17 4 12 9 7"/><path d="M20 18v-2a4 4 0 0 0-4-4H4"/></svg></span>
30 <% if (m.to_handle) { %><span class="fedi-manage-to"><%= m.to_handle %></span><% } %>
31 <% if (m.created_at && typeof formatDateTime === 'function') { %><span class="fedi-manage-time"><%= formatDateTime(m.created_at) %></span><% } %>
32 </div>
33 <div class="fedi-manage-content"><%- m.content %></div>
34 <div class="fedi-manage-foot">
35 <button type="button" class="fedi-edit-btn" aria-expanded="false"><svg viewBox="0 0 24 24" width="13" height="13" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 20h9"/><path d="M16.5 3.5a2.12 2.12 0 0 1 3 3L7 19l-4 1 1-4Z"/></svg> <%= t('fedi.edit') %></button>
36 <% if (m.in_reply_to) { %>
37 <a class="fedi-goto-btn" href="<%= m.in_reply_to %>" target="_blank" rel="nofollow noopener"><svg viewBox="0 0 24 24" width="13" height="13" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M7 17 17 7"/><path d="M7 7h10v10"/></svg> <%= t('fedi.goto_post') %></a>
38 <% } %>
39 <form method="post" action="/fediverse/<%= m.id %>/delete" class="fedi-del-form" data-confirm="<%= t('fedi.delete_confirm') %>">
40 <button type="submit" class="fedi-del-btn"><svg viewBox="0 0 24 24" width="13" height="13" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="3 6 5 6 21 6"/><path d="M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6m3 0V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2"/></svg> <%= t('comments.delete') %></button>
41 </form>
42 </div>
43 <form method="post" action="/fediverse/<%= m.id %>/edit" class="fedi-edit-form">
44 <textarea name="text" rows="3" maxlength="2000" class="fedi-edit-ta"><%= m.editable %></textarea>
45 <div class="fedi-edit-actions"><button type="submit" class="fedi-edit-save"><%= t('fedi.save_edit') %></button></div>
46 </form>
47 </li>
48 <% }); %>
49 </ul>
50 <script>
51 (function () {
52 if (window.__fediEditWired) return; window.__fediEditWired = true;
53 document.addEventListener('click', function (e) {
54 var b = e.target.closest && e.target.closest('.fedi-edit-btn');
55 if (!b) return;
56 var li = b.closest('.fedi-manage-item'); if (!li) return;
57 var form = li.querySelector('.fedi-edit-form'); if (!form) return;
58 var open = form.classList.toggle('is-open');
59 b.classList.toggle('is-open', open);
60 b.setAttribute('aria-expanded', open ? 'true' : 'false');
61 if (open) { var ta = form.querySelector('textarea'); if (ta) ta.focus(); }
62 });
63 })();
64 </script>
65 <% } %>
66 <p class="auth-interact-note"><a href="/"><%= t('fedi.remote_back') %></a></p>
67 <% } else if (typeof liked !== 'undefined' && liked) { %>
68 <h1 class="auth-interact-title">★ <%= t('fedi.liked_title') %></h1>
69 <p class="auth-interact-note"><%= t('fedi.liked_done') %></p>
70 <p class="auth-interact-actions">
71 <% if (uri) { %><a class="btn" href="<%= uri %>" rel="nofollow noopener"><%= t('fedi.remote_view_original') %></a><% } %>
72 <a class="btn btn-primary" href="/"><%= t('fedi.remote_back') %></a>
73 </p>
74 <% } else if (typeof boosted !== 'undefined' && boosted) { %>
75 <h1 class="auth-interact-title">🔁 <%= t('fedi.boosted_title') %></h1>
76 <p class="auth-interact-note"><%= t('fedi.boosted_done') %></p>
77 <p class="auth-interact-actions">
78 <% if (uri) { %><a class="btn" href="<%= uri %>" rel="nofollow noopener"><%= t('fedi.remote_view_original') %></a><% } %>
79 <a class="btn btn-primary" href="/"><%= t('fedi.remote_back') %></a>
80 </p>
81 <% } else if (typeof followed !== 'undefined' && followed) { %>
82 <h1 class="auth-interact-title"><%= t('fedi.followed_title') %></h1>
83 <p class="auth-interact-note"><%= t('fedi.followed_done') %></p>
84 <p class="auth-interact-actions">
85 <% if (uri) { %><a class="btn" href="<%= uri %>" rel="nofollow noopener"><%= t('fedi.view_profile') %></a><% } %>
86 <a class="btn btn-primary" href="/"><%= t('fedi.remote_back') %></a>
87 </p>
88 <% } else if (typeof sent !== 'undefined' && sent) { %>
89 <h1 class="auth-interact-title"><%= t('fedi.remote_sent_title') %></h1>
90 <p class="auth-interact-note"><%= t('fedi.remote_sent') %></p>
91 <p class="auth-interact-actions">
92 <% if (uri) { %><a class="btn btn-primary" href="<%= uri %>" rel="nofollow noopener"><%= t('fedi.remote_view_original') %></a><% } %>
93 <a class="btn" href="/"><%= t('fedi.remote_back') %></a>
94 </p>
95 <% } else if (typeof followTarget !== 'undefined' && followTarget) { %>
96 <h1 class="auth-interact-title"><%= t('fedi.follow_heading') %></h1>
97 <p class="auth-interact-meta">
98 <%= t('fedi.follow_intro') %>
99 <a href="<%= followTarget.actor_url %>" rel="nofollow noopener" target="_blank"><strong><%= followTarget.actor_name %></strong></a>
100 <span class="fedi-handle"><%= followTarget.actor_handle %></span>
101 </p>
102 <form method="post" action="/authorize_interaction/follow" class="auth-interact-form">
103 <input type="hidden" name="uri" value="<%= followTarget.actor_uri %>">
104 <div class="auth-interact-actions">
105 <button type="submit" class="btn btn-primary"><%= t('fedi.follow_btn') %></button>
106 <a href="/" class="btn"><%= t('comments.cancel') %></a>
107 </div>
108 </form>
109 <p class="auth-interact-note"><%= t('fedi.remote_as', { site: siteTitle }) %></p>
110 <% } else { %>
111 <h1 class="auth-interact-title"><%= t('fedi.remote_title') %></h1>
112
113 <% if (!target) { %>
114 <p class="auth-interact-note"><%= t('fedi.remote_notfound') %></p>
115 <form method="get" action="/authorize_interaction" class="auth-interact-form">
116 <input type="url" name="uri" placeholder="https://…/een-post" value="<%= uri || '' %>" required>
117 <button type="submit" class="btn btn-primary"><%= t('fedi.remote_load') %></button>
118 </form>
119 <% } else { %>
120 <p class="auth-interact-meta">
121 <%= t('fedi.remote_replying_to') %>
122 <a href="<%= target.actor_url %>" rel="nofollow noopener" target="_blank"><strong><%= target.actor_name %></strong></a>
123 <span class="fedi-handle"><%= target.actor_handle %></span>
124 </p>
125 <blockquote class="auth-interact-preview">
126 <% if (target.content) { %><div class="auth-interact-content"><%- target.content %></div>
127 <% } else if (target.preview) { %><%= target.preview %><% } %>
128 <% (target.images || []).forEach(function(im){ %>
129 <img class="auth-interact-img" src="<%= im %>" alt="" loading="lazy">
130 <% }); %>
131 </blockquote>
132 <% if (target.url || uri) { %>
133 <a class="auth-view-src" href="<%= target.url || uri %>" target="_blank" rel="nofollow noopener">
134 <svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M7 17 17 7"/><path d="M7 7h10v10"/></svg>
135 <span><%= t('fedi.remote_view_original') %></span>
136 </a>
137 <% } %>
138 <% var _liked = (typeof reacted !== 'undefined' && reacted.liked); var _boosted = (typeof reacted !== 'undefined' && reacted.boosted); %>
139 <div class="auth-interact-react">
140 <form method="post" action="/authorize_interaction/like" class="fedi-react-form">
141 <input type="hidden" name="uri" value="<%= uri %>">
142 <button type="submit" class="fedi-bigact fedi-bigact-like<%= _liked ? ' is-on' : '' %>" data-on="<%= t('fedi.unlike_short') %>" data-off="<%= t('fedi.like_short') %>">
143 <svg viewBox="0 0 24 24" fill="currentColor" aria-hidden="true"><path d="M12 2.6l2.9 5.88 6.49.95-4.7 4.58 1.11 6.46L12 17.96l-5.8 3.06 1.1-6.46-4.69-4.58 6.49-.95z"/></svg>
144 <span class="fedi-bigact-label"><%= _liked ? t('fedi.unlike_short') : t('fedi.like_short') %></span>
145 </button>
146 </form>
147 <form method="post" action="/authorize_interaction/boost" class="fedi-react-form">
148 <input type="hidden" name="uri" value="<%= uri %>">
149 <button type="submit" class="fedi-bigact fedi-bigact-boost<%= _boosted ? ' is-on' : '' %>" data-on="<%= t('tl.unboost') %>" data-off="<%= t('fedi.boost_short') %>">
150 <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="17 1 21 5 17 9"/><path d="M3 11V9a4 4 0 0 1 4-4h14"/><polyline points="7 23 3 19 7 15"/><path d="M21 13v2a4 4 0 0 1-4 4H3"/></svg>
151 <span class="fedi-bigact-label"><%= _boosted ? t('tl.unboost') : t('fedi.boost_short') %></span>
152 </button>
153 </form>
154 </div>
155 <p class="auth-interact-or"><%= t('fedi.or_reply') %></p>
156 <p class="auth-interact-where">💬 <%= t('fedi.reply_where') %></p>
157 <form method="post" action="/authorize_interaction" class="auth-interact-form">
158 <input type="hidden" name="uri" value="<%= uri %>">
159 <textarea name="text" rows="4" required placeholder="<%= t('fedi.reply_ph') %>"></textarea>
160 <div class="auth-interact-actions">
161 <button type="submit" class="btn"><%= t('fedi.send') %></button>
162 <a href="<%= uri %>" class="btn"><%= t('comments.cancel') %></a>
163 </div>
164 </form>
165 <p class="auth-interact-note"><%= t('fedi.remote_as', { site: siteTitle }) %></p>
166 <% } %>
167 <% } %>
168</div>
169
170<style>
171 .auth-interact { max-width: 640px; margin: 1rem auto; padding: 0 1rem; }
172 .auth-interact-title { margin: 0 0 1rem; }
173 .auth-interact-meta { color: var(--ink-soft, #888); margin: 0 0 .75rem; }
174 .auth-interact-preview {
175 margin: 0 0 1rem; padding: .75rem 1rem; border-left: 3px solid var(--accent, #888);
176 background: color-mix(in srgb, var(--ink, #000) 4%, transparent); border-radius: 0 12px 12px 0;
177 color: var(--ink, inherit);
178 }
179 .auth-interact-form { display: flex; flex-direction: column; gap: .75rem; }
180 .auth-interact-form textarea, .auth-interact-form input[type=url] {
181 width: 100%; box-sizing: border-box; padding: .6rem .8rem; font: inherit; resize: vertical;
182 border-radius: 12px; border: 1px solid color-mix(in srgb, var(--ink, #000) 18%, transparent);
183 background: var(--paper, #fff); color: var(--ink, #000);
184 }
185 .auth-interact-actions { display: flex; gap: .5rem; align-items: center; }
186 .auth-interact-note { color: var(--ink-soft, #999); font-size: .85rem; margin-top: 1rem; }
187 .auth-interact-where { margin: .25rem 0 .85rem; padding: .6rem .8rem; font-size: .85rem; line-height: 1.5; border-radius: 10px; background: color-mix(in srgb, var(--accent, #888) 12%, transparent); color: var(--ink, inherit); }
188 .auth-interact-content { line-height: 1.55; }
189 .auth-interact-content p { margin: .35rem 0; }
190 .auth-interact-content p:first-child { margin-top: 0; }
191 .auth-interact-img { max-width: 100%; height: auto; border-radius: 10px; margin: .5rem 0 0; display: block; }
192 .auth-interact-orig { margin: .75rem 0 0; font-size: .85rem; }
193 .auth-interact-orig a { color: var(--accent, #06c); }
194 .auth-view-src { display: inline-flex; align-items: center; gap: .5rem; margin: 0 0 1.1rem; padding: .6rem 1rem;
195 border: 1px solid color-mix(in srgb, var(--accent, #888) 45%, transparent); border-radius: 12px;
196 background: color-mix(in srgb, var(--accent, #888) 10%, transparent); color: var(--accent, #06c);
197 text-decoration: none; font-weight: 600; font-size: .92rem; transition: background .15s, border-color .15s; }
198 .auth-view-src:hover { background: color-mix(in srgb, var(--accent, #888) 18%, transparent); border-color: var(--accent, #888); }
199 .auth-interact-react { display: flex; gap: .6rem; flex-wrap: wrap; margin: 0 0 .25rem; }
200 .auth-interact-react form { margin: 0; }
201 .fedi-bigact { display: inline-flex; align-items: center; gap: .5rem; padding: .55rem 1.1rem; border-radius: 999px;
202 border: 1px solid color-mix(in srgb, var(--ink, #000) 14%, transparent);
203 background: color-mix(in srgb, var(--ink, #000) 4%, transparent);
204 color: var(--ink, inherit); font: inherit; font-weight: 600; font-size: .92rem; cursor: pointer; white-space: nowrap;
205 transition: background .12s, border-color .12s; }
206 .fedi-bigact svg { width: 17px; height: 17px; flex: 0 0 17px; }
207 .fedi-bigact-like svg { color: #e8b04b; }
208 .fedi-bigact-like:hover, .fedi-bigact-like.is-on { background: color-mix(in srgb, #e8b04b 16%, transparent); border-color: color-mix(in srgb, #e8b04b 55%, transparent); }
209 .fedi-bigact-boost svg { color: #2fa85a; }
210 .fedi-bigact-boost:hover, .fedi-bigact-boost.is-on { background: color-mix(in srgb, #2fa85a 16%, transparent); border-color: color-mix(in srgb, #2fa85a 55%, transparent); }
211 .fedi-manage { list-style: none; padding: 0; margin: 1.25rem 0 1rem; display: flex; flex-direction: column; gap: .7rem; }
212 .fedi-manage-item { padding: .9rem 1rem; border-radius: 14px; background: color-mix(in srgb, var(--ink, #000) 3.5%, transparent); border: 1px solid color-mix(in srgb, var(--ink, #000) 9%, transparent); transition: border-color .15s ease, box-shadow .15s ease; }
213 .fedi-manage-item:hover { border-color: color-mix(in srgb, var(--accent, #888) 28%, transparent); box-shadow: 0 2px 12px color-mix(in srgb, var(--ink, #000) 6%, transparent); }
214 .fedi-manage-head { display: flex; align-items: center; gap: .5rem; margin: 0 0 .5rem; }
215 .fedi-manage-icon { flex: 0 0 26px; width: 26px; height: 26px; border-radius: 50%; display: inline-flex; align-items: center; justify-content: center;
216 background: color-mix(in srgb, var(--accent, #888) 16%, transparent); color: var(--accent, #06c); }
217 .fedi-manage-icon svg { width: 14px; height: 14px; }
218 .fedi-manage-to { font-weight: 600; color: var(--ink, inherit); font-size: .9rem; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0; }
219 .fedi-manage-time { color: var(--ink-soft, #999); font-size: .76rem; margin-left: auto; flex: 0 0 auto; white-space: nowrap; }
220 .fedi-manage-content { line-height: 1.55; overflow-wrap: anywhere; padding-left: calc(26px + .5rem); }
221 .fedi-manage-content p { margin: .15rem 0; }
222 .fedi-manage-content p:first-child { margin-top: 0; }
223 .fedi-manage-content p:last-child { margin-bottom: 0; }
224 .fedi-manage-foot { display: flex; align-items: center; justify-content: flex-start; flex-wrap: wrap; gap: .5rem; margin-top: .65rem; }
225 .fedi-goto-btn { display: inline-flex; align-items: center; gap: .35rem; border: 1px solid color-mix(in srgb, var(--accent, #888) 45%, transparent); background: color-mix(in srgb, var(--accent, #888) 12%, transparent); color: var(--accent, #06c); border-radius: 999px; padding: .3rem .8rem; font-size: .82rem; text-decoration: none; transition: background .15s ease; }
226 .fedi-goto-btn:hover { background: color-mix(in srgb, var(--accent, #888) 22%, transparent); }
227 .fedi-del-btn { display: inline-flex; align-items: center; gap: .35rem; border: 1px solid color-mix(in srgb, #d9534f 45%, transparent); background: color-mix(in srgb, #d9534f 12%, transparent); color: #e06b66; border-radius: 999px; padding: .3rem .8rem; font: inherit; font-size: .82rem; cursor: pointer; transition: background .15s ease; }
228 .fedi-del-btn:hover { background: color-mix(in srgb, #d9534f 24%, transparent); }
229 .fedi-bm { margin: 0 0 1.5rem; padding: 1rem; border-radius: 14px;
230 border: 1px dashed color-mix(in srgb, var(--accent, #888) 45%, transparent);
231 background: color-mix(in srgb, var(--accent, #888) 7%, transparent); }
232 .fedi-bm-btn { display: inline-flex; align-items: center; gap: .45rem; padding: .5rem 1rem; border-radius: 999px;
233 background: var(--accent, #06c); color: #fff; font: inherit; font-weight: 600; font-size: .9rem; text-decoration: none;
234 cursor: grab; user-select: none; box-shadow: 0 2px 8px color-mix(in srgb, var(--accent, #000) 30%, transparent); }
235 .fedi-bm-btn:active { cursor: grabbing; }
236 .fedi-bm-btn.nudge { animation: fedi-bm-nudge .6s ease; }
237 @keyframes fedi-bm-nudge { 0%,100% { transform: translateX(0); } 25% { transform: translateX(-4px); } 75% { transform: translateX(4px); } }
238 .fedi-bm-help { color: var(--ink-soft, #888); font-size: .82rem; line-height: 1.5; margin: .6rem 0 0; }
239 .fedi-edit-btn { display: inline-flex; align-items: center; gap: .35rem; border: 1px solid color-mix(in srgb, var(--ink, #888) 28%, transparent);
240 background: color-mix(in srgb, var(--ink, #888) 8%, transparent); color: var(--ink-soft, #aaa); border-radius: 999px; padding: .3rem .8rem;
241 font: inherit; font-size: .82rem; cursor: pointer; transition: background .15s ease, color .15s ease; }
242 .fedi-edit-btn:hover { background: color-mix(in srgb, var(--ink, #888) 16%, transparent); }
243 .fedi-edit-btn.is-open { color: var(--accent); border-color: color-mix(in srgb, var(--accent) 45%, transparent); background: color-mix(in srgb, var(--accent) 10%, transparent); }
244 .fedi-del-form { margin-left: auto; }
245 .fedi-edit-form { display: none; margin: .55rem 0 0; }
246 .fedi-edit-form.is-open { display: block; }
247 .fedi-edit-ta { width: 100%; box-sizing: border-box; min-height: 70px; resize: vertical; padding: .55rem .7rem;
248 border: 1.5px solid var(--rule, #333); border-radius: 10px; background: var(--paper-2, #14141a); color: var(--ink, #eee); font: inherit; font-size: .9rem; }
249 .fedi-edit-ta:focus { outline: none; border-color: var(--accent); }
250 .fedi-edit-actions { display: flex; justify-content: flex-end; margin-top: .5rem; }
251 .fedi-edit-save { padding: .4rem 1rem; border: 0; border-radius: 999px; background: var(--accent); color: var(--paper, #fff);
252 font: inherit; font-weight: 600; font-size: .82rem; cursor: pointer; }
253</style>
254
255<script>
256/* Like/Boost toggle in place — POST via fetch, flip the button, stay on the page. */
257(function(){
258 if (window.__fediReactWired) return; window.__fediReactWired = true;
259 document.addEventListener('submit', function(e){
260 var f = e.target.closest && e.target.closest('.fedi-react-form');
261 if (!f) return;
262 e.preventDefault();
263 var btn = f.querySelector('button'); if (!btn || btn.disabled) return;
264 btn.disabled = true;
265 var body = new URLSearchParams();
266 new FormData(f).forEach(function(v, k){ body.append(k, v); });
267 fetch(f.action, { method: 'POST', body: body, headers: { 'X-Requested-With': 'fetch' }, credentials: 'same-origin' })
268 .then(function(r){ return r.ok ? r.json() : null; })
269 .then(function(j){
270 if (j) {
271 var on = !!j.on;
272 btn.classList.toggle('is-on', on);
273 var lbl = btn.querySelector('.fedi-bigact-label');
274 if (lbl) lbl.textContent = on ? (btn.getAttribute('data-on') || lbl.textContent) : (btn.getAttribute('data-off') || lbl.textContent);
275 }
276 })
277 .catch(function(){})
278 .then(function(){ btn.disabled = false; });
279 });
280})();
281</script>
Note: See TracBrowser for help on using the repository browser.