fix: csrf and clean up web

Author: ItsNotGoodName

web/components/format_date.templ

@@ -6,3 +6,7 @@ import "github.com/ItsNotGoodName/smtpbridge/web/meta"
 templ FormatDate(m meta.Meta, t time.Time) {
   <sl-format-date month="numeric" day="numeric" year="numeric" hour="numeric" minute="numeric" hour-format={ m.TimeHourFormat } date={ t.Format(time.RFC3339) }></sl-format-date>
 }
+
+templ FormatDateString(m meta.Meta, t string) {
+  <sl-format-date month="numeric" day="numeric" year="numeric" hour="numeric" minute="numeric" hour-format={ m.TimeHourFormat } date={ t }></sl-format-date>
+}

web/components/format_date_templ.go

@@ -108,6 +108,12 @@ templ RuleFormUpdate(props RuleFormUpdateProps) {
       }
     </fieldset>
     <button disabled?={ props.Rule.Internal } type="submit" class="btn btn-primary btn-block">Update Rule</button>
+    if props.Rule.Internal {
+      <div class="alert alert-warning">
+        <svg xmlns="http://www.w3.org/2000/svg" class="stroke-current shrink-0 h-6 w-6" fill="none" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" /></svg>
+        <span>Cannot be edited because it is an internal rule.</span>
+      </div>
+    }
     if props.Flash != nil {
       {! props.Flash }
     }

web/components/rule_form.templ

@@ -23,7 +23,7 @@ func NewRouter(ct pages.Controller, app core.App, fileFS fs.FS, csrfSecret []byt
 	r.Use(middleware.RealIP)
 	r.Use(middleware.Logger)
 	r.Use(middleware.Recoverer)
-	r.Use(csrf.Protect(csrfSecret, csrf.Secure(false)))
+	r.Use(csrf.Protect(csrfSecret, csrf.Secure(false), csrf.Path("/")))
 
 	mountWebFS(r, web.FS)
 

web/components/rule_form_templ.go

@@ -25,7 +25,7 @@ templ attachmentListView(m meta.Meta, props attachmentListViewProps) {
     </div>
     <div class="flex flex-col gap-4 p-4">
       <div class="join flex items-center justify-end">
-        <button class="btn btn-sm btn-info join-item" hx-post={ routes.AttachmentTrim().URLString() }>
+        <button class="btn btn-sm btn-info join-item tooltip-left tooltip" data-tip="delete orphan attachments" hx-post={ routes.AttachmentTrim().URLString() }>
           @icons.Recycle("w-5 h-5")
         </button>
       </div>

web/http/router.go

@@ -180,14 +180,9 @@ templ envelopeListView(m meta.Meta, props envelopeListViewProps) {
             }
             </td>
             <th class="w-0 whitespace-nowrap">
-              <div class="join flex items-center">
-                <a href={ routes.Envelope(env.Message.ID).URL() } class="btn btn-primary btn-xs join-item">
-                  @icons.Eye("h-4 w-4")
-                </a>
-                <button class="btn btn-error btn-xs join-item" hx-delete={ routes.Envelope(env.Message.ID).URLString() } hx-target="closest tr" hx-confirm="Are you sure you wish to delete this envelope?" >
-                  @icons.Trash("h-4 w-4")
-                </button>
-              </div>
+              <button class="btn btn-error btn-xs join-item" hx-delete={ routes.Envelope(env.Message.ID).URLString() } hx-target="closest tr" hx-confirm="Are you sure you wish to delete this envelope?" >
+                @icons.Trash("h-4 w-4")
+              </button>
             </th>
           </tr>
           }

web/pages/attachment.templ

@@ -88,7 +88,7 @@ templ indexView(m meta.Meta, props indexViewProps) {
                   </tr>
                   <tr>
                     <th>Date</th>
-                    <td>{ build.Current.Date }</td>
+                    <td>@c.FormatDateString(m, build.Current.Date)</td>
                   </tr>
                   <tr>
                     <th>Version</th>