variables and mentions

api/app/Integrations/Handlers/SubmissionConfirmationIntegration.php

@@ -26,7 +26,7 @@ function ($attribute, $value, $fail) {
                     }
                 },
             ],
-            'confirmation_reply_to' => 'email|nullable',
+            'confirmation_reply_to' => 'nullable',
             'notification_sender' => 'required',
             'notification_subject' => 'required',
             'notification_body' => 'required',
@@ -107,6 +107,7 @@ public static function validateEmail($email): bool
     public static function formatData(array $data): array
     {
         return array_merge(parent::formatData($data), [
+            'notification_subject' => Purify::clean($data['notification_subject'] ?? ''),
             'notification_body' => Purify::clean($data['notification_body'] ?? ''),
         ]);
     }

api/app/Mail/Forms/SubmissionConfirmationMail.php

@@ -4,6 +4,7 @@
 
 use App\Events\Forms\FormSubmitted;
 use App\Mail\OpenFormMail;
+use App\Open\MentionParser;
 use App\Service\Forms\FormSubmissionFormatter;
 use Illuminate\Bus\Queueable;
 use Illuminate\Contracts\Queue\ShouldQueue;
@@ -16,13 +17,21 @@ class SubmissionConfirmationMail extends OpenFormMail implements ShouldQueue
     use Queueable;
     use SerializesModels;
 
+    private $formattedData;
+
     /**
      * Create a new message instance.
      *
      * @return void
      */
     public function __construct(private FormSubmitted $event, private $integrationData)
     {
+        $formatter = (new FormSubmissionFormatter($event->form, $event->data))
+            ->createLinks()
+            ->outputStringsOnly()
+            ->useSignedUrlForFiles();
+
+        $this->formattedData = $formatter->getFieldsWithValue();
     }
 
     /**
@@ -34,17 +43,14 @@ public function build()
     {
         $form = $this->event->form;
 
-        $formatter = (new FormSubmissionFormatter($form, $this->event->data))
-            ->createLinks()
-            ->outputStringsOnly()
-            ->useSignedUrlForFiles();
 
         return $this
             ->replyTo($this->getReplyToEmail($form->creator->email))
             ->from($this->getFromEmail(), $this->integrationData->notification_sender)
-            ->subject($this->integrationData->notification_subject)
+            ->subject($this->getSubject())
             ->markdown('mail.form.confirmation-submission-notification', [
-                'fields' => $formatter->getFieldsWithValue(),
+                'notificationBody' => $this->getNotificationBody(),
+                'fields' => $this->formattedData,
                 'form' => $form,
                 'integrationData' => $this->integrationData,
                 'noBranding' => $form->no_branding,
@@ -67,9 +73,25 @@ private function getReplyToEmail($default)
     {
         $replyTo = $this->integrationData->confirmation_reply_to ?? null;
 
-        if ($replyTo && filter_var($replyTo, FILTER_VALIDATE_EMAIL)) {
-            return $replyTo;
+        if ($replyTo) {
+            $parser = new MentionParser($replyTo, $this->formattedData);
+            $parsedReplyTo = $parser->parse();
+            if ($parsedReplyTo && filter_var($parsedReplyTo, FILTER_VALIDATE_EMAIL)) {
+                return $parsedReplyTo;
+            }
         }
         return $default;
     }
+
+    private function getSubject()
+    {
+        $parser = new MentionParser($this->integrationData->notification_subject, $this->formattedData);
+        return $parser->parse();
+    }
+
+    private function getNotificationBody()
+    {
+        $parser = new MentionParser($this->integrationData->notification_body, $this->formattedData);
+        return $parser->parse();
+    }
 }

api/app/Open/MentionParser.php

@@ -0,0 +1,97 @@
+<?php
+
+namespace App\Open;
+
+use DOMDocument;
+use DOMXPath;
+
+class MentionParser
+{
+    private $content;
+    private $data;
+
+    public function __construct($content, $data)
+    {
+        $this->content = $content;
+        $this->data = $data;
+    }
+
+    public function parse()
+    {
+        $doc = new DOMDocument();
+        // Disable libxml errors and use internal errors
+        $internalErrors = libxml_use_internal_errors(true);
+
+        // Wrap the content in a root element to ensure it's valid XML
+        $wrappedContent = '<root>' . $this->content . '</root>';
+
+        // Load HTML, using UTF-8 encoding
+        $doc->loadHTML(mb_convert_encoding($wrappedContent, 'HTML-ENTITIES', 'UTF-8'), LIBXML_HTML_NOIMPLIED | LIBXML_HTML_NODEFDTD);
+
+        // Restore libxml error handling
+        libxml_use_internal_errors($internalErrors);
+
+        $xpath = new DOMXPath($doc);
+        $mentionElements = $xpath->query("//span[@mention]");
+
+        foreach ($mentionElements as $element) {
+            $fieldId = $element->getAttribute('mention-field-id');
+            $fallback = $element->getAttribute('mention-fallback');
+            $value = $this->getData($fieldId);
+
+            if ($value !== null) {
+                $textNode = $doc->createTextNode(is_array($value) ? implode(', ', $value) : $value);
+                $element->parentNode->replaceChild($textNode, $element);
+            } elseif ($fallback) {
+                $textNode = $doc->createTextNode($fallback);
+                $element->parentNode->replaceChild($textNode, $element);
+            } else {
+                $element->parentNode->removeChild($element);
+            }
+        }
+
+        // Extract and return the processed HTML content
+        $result = $doc->saveHTML($doc->getElementsByTagName('root')->item(0));
+
+        // Remove the root tags we added
+        $result = preg_replace('/<\/?root>/', '', $result);
+
+        // Trim whitespace and convert HTML entities back to UTF-8 characters
+        $result = trim(html_entity_decode($result, ENT_QUOTES | ENT_HTML5, 'UTF-8'));
+
+        return $result;
+    }
+
+    private function replaceMentions()
+    {
+        $pattern = '/<span[^>]*mention-field-id="([^"]*)"[^>]*mention-fallback="([^"]*)"[^>]*>.*?<\/span>/';
+        return preg_replace_callback($pattern, function ($matches) {
+            $fieldId = $matches[1];
+            $fallback = $matches[2];
+            $value = $this->getData($fieldId);
+
+            if ($value !== null) {
+                if (is_array($value)) {
+                    return implode(' ', array_map(function ($v) {
+                        return $v;
+                    }, $value));
+                }
+                return $value;
+            } elseif ($fallback) {
+                return $fallback;
+            }
+            return '';
+        }, $this->content);
+    }
+
+    private function getData($fieldId)
+    {
+        $value = collect($this->data)->firstWhere('nf_id', $fieldId)['value'] ?? null;
+
+        if (is_object($value)) {
+            return (array) $value;
+        }
+
+        return $value;
+    }
+}

api/app/Service/HtmlPurifier/OpenFormsHtmlDefinition.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Service\HtmlPurifier;
+
+use HTMLPurifier_HTMLDefinition;
+use Stevebauman\Purify\Definitions\Definition;
+use Stevebauman\Purify\Definitions\Html5Definition;
+
+class OpenFormsHtmlDefinition implements Definition
+{
+    public static function apply(HTMLPurifier_HTMLDefinition $definition)
+    {
+        Html5Definition::apply($definition);
+
+        $definition->addAttribute('span', 'mention-field-id', 'Text');
+        $definition->addAttribute('span', 'mention-field-name', 'Text');
+        $definition->addAttribute('span', 'mention-fallback', 'Text');
+        $definition->addAttribute('span', 'mention', 'Bool');
+        $definition->addAttribute('span', 'contenteditable', 'Bool');
+    }
+}

api/config/purify.php

@@ -1,6 +1,6 @@
 <?php
 
-use Stevebauman\Purify\Definitions\Html5Definition;
+use App\Service\HtmlPurifier\OpenFormsHtmlDefinition;
 
 return [
 
@@ -40,7 +40,7 @@
     'configs' => [
 
         'default' => [
-            'HTML.Allowed' => 'h1,h2,b,strong,i,em,a[href|title],ul,ol,li,p,br,span,*[style]',
+            'HTML.Allowed' => 'h1,h2,b,strong,i,em,a[href|title],ul,ol,li,p,br,span[mention|mention-field-id|mention-field-name|mention-fallback],*[style]',
             'HTML.ForbiddenElements' => '',
             'CSS.AllowedProperties' => 'font,font-size,font-weight,font-style,text-decoration,color,text-align',
 
@@ -86,7 +86,7 @@
     |
     */
 
-    'definitions' => Html5Definition::class,
+    'definitions' => OpenFormsHtmlDefinition::class,
 
     /*
     |--------------------------------------------------------------------------

api/resources/views/mail/form/confirmation-submission-notification.blade.php

@@ -1,6 +1,6 @@
 @component('mail::message', ['noBranding' => $noBranding])
 
-{!! $integrationData->notification_body !!}
+{!! $notificationBody !!}
 
 @if($form->editable_submissions)
 @component('mail::button', ['url' => $form->share_url.'?submission_id='.$submission_id])