fuck this shit

src/app/api/posts/[slug]/route.ts

@@ -2,19 +2,16 @@ import { NextResponse } from 'next/server';
 import fs from 'fs';
 import path from 'path';
 import matter from 'gray-matter';
-import { remark } from 'remark';
-import html from 'remark-html';
-import gfm from 'remark-gfm';
-import remarkRehype from 'remark-rehype';
-import rehypeRaw from 'rehype-raw';
-import rehypeStringify from 'rehype-stringify';
+import { marked } from 'marked';
+import DOMPurify from 'dompurify';
+import { JSDOM } from 'jsdom';
 
 const postsDirectory = path.join(process.cwd(), 'posts');
 
 // Function to get file creation date
 function getFileCreationDate(filePath: string): Date {
   const stats = fs.statSync(filePath);
-  return stats.birthtime;
+  return stats.birthtime ?? stats.mtime;
 }
 
 async function getPostBySlug(slug: string) {
@@ -24,12 +21,48 @@ async function getPostBySlug(slug: string) {
   const { data, content } = matter(fileContents);
   const createdAt = getFileCreationDate(fullPath);
 
-  const processedContent = await remark()
-    .use(gfm)
-    .use(remarkRehype, { allowDangerousHtml: true })
-    .use(rehypeRaw)
-    .use(rehypeStringify)
-    .process(content);
+  let processedContent = '';
+  try {
+    // Configure marked options
+    marked.setOptions({
+      gfm: true,
+      breaks: true,
+      headerIds: true,
+      mangle: false
+    });
+
+    // Convert markdown to HTML
+    const rawHtml = marked(content);
+
+    // Create a DOM window for DOMPurify
+    const window = new JSDOM('').window;
+    const purify = DOMPurify(window);
+
+    // Sanitize the HTML
+    processedContent = purify.sanitize(rawHtml, {
+      ALLOWED_TAGS: [
+        'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+        'p', 'a', 'ul', 'ol', 'li', 'blockquote',
+        'pre', 'code', 'em', 'strong', 'del',
+        'hr', 'br', 'img', 'table', 'thead', 'tbody',
+        'tr', 'th', 'td', 'div', 'span', 'iframe'
+      ],
+      ALLOWED_ATTR: [
+        'class', 'id', 'style',
+        'href', 'target', 'rel',
+        'src', 'alt', 'title', 'width', 'height',
+        'frameborder', 'allowfullscreen'
+      ],
+      ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
+    });
+  } catch (err) {
+    console.error(`Error processing markdown for slug "${realSlug}":`, err);
+    // Return a more informative error message in the content
+    processedContent = `<div class="error-message">
+      <p>Error processing markdown content. Please check the console for details.</p>
+      <pre>${err instanceof Error ? err.message : 'Unknown error'}</pre>
+    </div>`;
+  }
 
   return {
     slug: realSlug,
@@ -37,9 +70,9 @@ async function getPostBySlug(slug: string) {
     date: data.date,
     tags: data.tags || [],
     summary: data.summary,
-    content: processedContent.toString(),
+    content: processedContent,
     createdAt: createdAt.toISOString(),
-    author: process.env.NEXT_PUBLIC_BLOG_OWNER + "'s" || 'Anonymous',
+    author: (process.env.NEXT_PUBLIC_BLOG_OWNER || 'Anonymous') + "'s",
   };
 }
 
@@ -48,12 +81,19 @@ export async function GET(
   { params }: { params: { slug: string[] | string } }
 ) {
   try {
-    // Support catch-all route: slug can be string or string[]
     const slugArr = Array.isArray(params.slug) ? params.slug : [params.slug];
     const slugPath = slugArr.join('/');
     const post = await getPostBySlug(slugPath);
     return NextResponse.json(post);
   } catch (error) {
-    return NextResponse.json({ error: 'Fehler beim Laden des Beitrags' }, { status: 500 });
+    console.error('Error loading post:', error);
+    return NextResponse.json(
+      { 
+        error: 'Error loading post',
+        details: error instanceof Error ? error.message : 'Unknown error'
+      }, 
+      { status: 500 }
+    );
   }
-} 
+}
+