From 7839dfa6fffa8664c5e6651c1db3e37f00d86d13 Mon Sep 17 00:00:00 2001
From: Nikita Karamov <nick@karamoff.dev>
Date: Fri, 27 Aug 2021 15:03:24 +0200
Subject: [PATCH] Replace JS on form with a POST request

Closes #12
---
 api/toot.js    | 35 +++++++++++++++++++++++++++++++++++
 src/index.html |  2 +-
 src/main.js    | 14 --------------
 3 files changed, 36 insertions(+), 15 deletions(-)
 create mode 100644 api/toot.js

diff --git a/api/toot.js b/api/toot.js
new file mode 100644
index 0000000..4b822e0
--- /dev/null
+++ b/api/toot.js
@@ -0,0 +1,35 @@
+/*!
+	toot - Cross-instance share page for Mastodon
+	Copyright (C) 2020-2021  Nikita Karamov <nick@karamoff.dev>
+
+	This program is free software: you can redistribute it and/or modify
+	it under the terms of the GNU Affero General Public License as published
+	by the Free Software Foundation, either version 3 of the License, or
+	(at your option) any later version.
+
+	This program is distributed in the hope that it will be useful,
+	but WITHOUT ANY WARRANTY; without even the implied warranty of
+	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+	GNU Affero General Public License for more details.
+
+	You should have received a copy of the GNU Affero General Public License
+	along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+
+module.exports = function (req, res) {
+	let text = "";
+	let instanceURL = "https://mastodon.social/";
+	if (req.body) {
+		if (req.body.text) {
+			text = req.body.text;
+		}
+		if (req.body.instance) {
+			instanceURL = req.body.instance;
+		}
+	}
+
+	return res.redirect(
+		303,
+		instanceURL + "share?text=" + encodeURIComponent(text)
+	);
+};
diff --git a/src/index.html b/src/index.html
index ed44418..33b65e7 100644
--- a/src/index.html
+++ b/src/index.html
@@ -61,7 +61,7 @@
 			</p>
 		</header>
 		<main>
-			<form id="form">
+			<form action="/api/toot" method="POST">
 				<section>
 					<label for="text">Post text</label>
 					<textarea
diff --git a/src/main.js b/src/main.js
index 50f31cf..ee41d96 100644
--- a/src/main.js
+++ b/src/main.js
@@ -20,7 +20,6 @@ const INSTANCE_LIST_URL = "https://api.joinmastodon.org/servers";
 
 const $instance = document.getElementById("instance");
 const $instanceDatalist = document.getElementById("instanceDatalist");
-const $form = document.getElementById("form");
 
 /**
  * Adds missing "https://" and ending slash to the URL
@@ -90,16 +89,3 @@ if (prefillInstance != null) {
 }
 
 $instance.addEventListener("focus", loadInstances);
-
-$form.addEventListener("submit", function (e) {
-	e.preventDefault();
-	const text = e.target.elements["text"].value;
-	const instanceURL = normalizeUrl(e.target.elements["instance"].value);
-	const remember = e.target.elements["remember"].checked;
-
-	if (remember) {
-		window.localStorage.setItem("mastodon_instance", instanceURL);
-	}
-
-	window.location.href = instanceURL + "share?text=" + encodeURIComponent(text);
-});