4b48377d44
Add a generic, placement-aware mechanism for operators to inject HTML/JS into every page that extends base.html or base_login.html. Each entry takes name, enabled, placement (head_start | head_end | body_end), and html. Replaces the need for per-vendor helpers when shipping feedback widgets, analytics, or error-capture snippets. Trust boundary mirrors the existing instance.logo_svg / instance.overview pattern — admin-only, rendered with `| safe`. Resolved by app/instance_config.py::get_custom_scripts(), surfaced in /admin/server-config via _KNOWN_FIELDS["instance"]. Empty default keeps the OSS vendor-neutral; sample Marker.io block ships commented out in config/instance.yaml.example as the canonical example.
39 lines
1.5 KiB
HTML
39 lines
1.5 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
{# Operator-injected scripts (placement=head_start). Mirrors base.html
|
|
so login/auth pages surface custom_scripts too. #}
|
|
{% for s in custom_scripts | default([]) if s.placement == 'head_start' %}
|
|
{{ s.html | safe }}
|
|
{% endfor %}
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>{% block title %}Data Analyst Portal{% endblock %}</title>
|
|
<link rel="stylesheet" href="{{ static_url('style-custom.css') }}">
|
|
{% include '_theme.html' %}
|
|
{# Operator-injected scripts (placement=head_end). Mirrors base.html. #}
|
|
{% for s in custom_scripts | default([]) if s.placement == 'head_end' %}
|
|
{{ s.html | safe }}
|
|
{% endfor %}
|
|
</head>
|
|
<body>
|
|
{% with messages = get_flashed_messages(with_categories=true) %}
|
|
{% if messages %}
|
|
<div class="flash-messages" style="position: fixed; top: 20px; left: 50%; transform: translateX(-50%); z-index: 1000; max-width: 500px;">
|
|
{% for category, message in messages %}
|
|
<div class="flash flash-{{ category }}">
|
|
{{ message }}
|
|
</div>
|
|
{% endfor %}
|
|
</div>
|
|
{% endif %}
|
|
{% endwith %}
|
|
|
|
{% block content %}{% endblock %}
|
|
{% include "_version_badge.html" %}
|
|
{# Operator-injected scripts (placement=body_end). Mirrors base.html. #}
|
|
{% for s in custom_scripts | default([]) if s.placement == 'body_end' %}
|
|
{{ s.html | safe }}
|
|
{% endfor %}
|
|
</body>
|
|
</html>
|