Decode HTML entities in comments, make blockquotes smaller

Flask escapes < > etc, and the markdown parser does not consider
&gt; as > aka blockquote. Fixed by decoding HTML source before
rendering markdown.

nyaa/forms.py

@@ -182,7 +182,7 @@ class DisabledSelectField(SelectField):
 
 class CommentForm(FlaskForm):
     comment = TextAreaField('Make a comment', [
-        Length(min=3, max=1024, message='Comment must be at least %(min)d characters '
+        Length(min=3, max=2048, message='Comment must be at least %(min)d characters '
                'long and %(max)d at most.'),
         DataRequired(message='Comment must not be empty.')
     ])

nyaa/static/css/main.css

@@ -565,3 +565,9 @@ td.report-action-column {
 		width: 400px;
 	}
 }
+
+
+/* Override <blockquote> font size (assume main.css comes after bootstrap) */
+blockquote {
+	font-size: inherit;
+}

nyaa/static/js/main.js

@@ -75,6 +75,7 @@ $(document).ready(function() {
 		$(this).next().stop().slideToggle(250);
 	});
 
+	// Comment editing below
 	$('.edit-comment').click(function(e) {
 		e.preventDefault();
 		$(this).closest('.comment').toggleClass('is-editing');
@@ -234,15 +235,24 @@ document.addEventListener("DOMContentLoaded", function() {
 	for (var i = 0; i < markdownTargets.length; i++) {
 		var target = markdownTargets[i];
 		var rendered;
+		var markdownSource = htmlDecode(target.innerHTML);
 		if (target.attributes["markdown-text-inline"]) {
-			rendered = markdown.renderInline(target.innerHTML);
+			rendered = markdown.renderInline(markdownSource);
 		} else {
-			rendered = markdown.render(target.innerHTML);
+			rendered = markdown.render(markdownSource);
 		}
 		target.innerHTML = rendered;
 	}
 });
 
+
+// Decode HTML entities (&gt; etc), used for decoding comment markdown from escaped text
+function htmlDecode(input){
+	var e = document.createElement('div');
+	e.innerHTML = input;
+	return e.childNodes[0].nodeValue;
+}
+
 //
 // This is the unminified version of the theme changer script in the layout.html @ line: 21
 // ===========================================================