Method new

isso/views/comments.py:337–418

(self, environ, request, uri)

    @xhr
    @requires(str, "uri")
    def new(self, environ, request, uri):
        data = request.json

        for field in set(data.keys()) - API.ACCEPT:
            data.pop(field)

        for key in ("author", "email", "website", "parent"):
            data.setdefault(key, None)

        valid, reason = API.verify(data)
        if not valid:
            return BadRequest(reason)

        for field in ("author", "email"):
            if data.get(field) is not None:
                data[field] = escape(data[field], quote=False)

        if data.get("website") is not None:
            data["website"] = escape(data["website"], quote=True)

        if data.get("website"):
            data["website"] = normalize(data["website"])

        data["mode"] = 2 if self.moderated else 1
        data["remote_addr"] = self._remote_addr(request)

        with self.isso.lock:
            if uri not in self.threads:
                if not data.get("title"):
                    with http.curl("GET", local("origin"), uri) as resp:
                        if resp and resp.status == 200:
                            uri, title = parse.thread(resp.read(), id=uri)
                        else:
                            return BadRequest(
                                f"Cannot create new thread: URI {uri} is not accessible and no title was provided. Please provide a title parameter in your request."
                            )
                else:
                    title = data["title"]

                thread = self.threads.new(uri, title)
                self.signal("comments.new:new-thread", thread)
            else:
                thread = self.threads[uri]

        # notify extensions that the new comment is about to save
        self.signal("comments.new:before-save", thread, data)

        valid, reason = self.guard.validate(uri, data)
        if not valid:
            self.signal("comments.new:guard", reason)
            raise Forbidden(reason)

        with self.isso.lock:
            # if email-based auto-moderation enabled, check for previously approved author
            # right before approval.
            if self.approve_if_email_previously_approved and self.comments.is_previously_approved_author(data["email"]):
                data["mode"] = 1