From 0e0c446579cfee9b5230daecf0094b87fa237297 Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Mon, 6 May 2024 22:19:35 -0400
Subject: [PATCH 01/14] Update comrak to include:

https://github.com/philomena-dev/comrak/pull/1
https://github.com/philomena-dev/comrak/pull/2

by @Meow
---
 native/philomena/Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/native/philomena/Cargo.lock b/native/philomena/Cargo.lock
index 2612ec9c..1c6c6b60 100644
--- a/native/philomena/Cargo.lock
+++ b/native/philomena/Cargo.lock
@@ -43,8 +43,8 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
 [[package]]
 name = "comrak"
-version = "0.22.0"
-source = "git+https://github.com/philomena-dev/comrak?branch=main#a27d6b6487d94e040e5cdb70733d3a59cba5bab0"
+version = "0.23.0"
+source = "git+https://github.com/philomena-dev/comrak?branch=main#4c7cd1a1aa2db546ff253b69950d01e8f8aebd3a"
 dependencies = [
  "derive_builder",
  "entities",

From d76be72a5de0969e01bde4bd0743c4a3e3cab144 Mon Sep 17 00:00:00 2001
From: mdashlw <mdashlw@gmail.com>
Date: Sat, 11 May 2024 19:04:52 +0300
Subject: [PATCH 02/14] feat(thumbnailer): purge cache for file when handling
 :replace_original from processors (#256)

---
 lib/philomena/images/thumbnailer.ex | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/lib/philomena/images/thumbnailer.ex b/lib/philomena/images/thumbnailer.ex
index dd7240e1..d6d5cc8e 100644
--- a/lib/philomena/images/thumbnailer.ex
+++ b/lib/philomena/images/thumbnailer.ex
@@ -5,6 +5,7 @@ defmodule Philomena.Images.Thumbnailer do
 
   alias Philomena.DuplicateReports
   alias Philomena.ImageIntensities
+  alias Philomena.ImagePurgeWorker
   alias Philomena.Images.Image
   alias Philomena.Processors
   alias Philomena.Analyzers
@@ -103,8 +104,14 @@ defmodule Philomena.Images.Thumbnailer do
   defp apply_change(image, {:intensities, intensities}),
     do: ImageIntensities.create_image_intensity(image, intensities)
 
-  defp apply_change(image, {:replace_original, new_file}),
-    do: upload_file(image, new_file, "full.#{image.image_format}")
+  defp apply_change(image, {:replace_original, new_file}) do
+    full = "full.#{image.image_format}"
+    upload_file(image, new_file, full)
+
+    Exq.enqueue(Exq, "indexing", ImagePurgeWorker, [
+      Path.join(image_url_base(image, nil), full)
+    ])
+  end
 
   defp apply_change(image, {:thumbnails, thumbnails}),
     do: Enum.map(thumbnails, &apply_thumbnail(image, &1))

From 7592b0f4d990d81f78ac5c92ac7dd233bddc67a2 Mon Sep 17 00:00:00 2001
From: liamwhite <liamwhite@users.noreply.github.com>
Date: Mon, 13 May 2024 19:47:37 -0400
Subject: [PATCH 03/14] Hide Elixir dependencies from host (#257)

---
 docker-compose.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 8e644165..a5034ca0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,6 +2,10 @@ version: '3'
 volumes:
   postgres_data: {}
   elastic_data: {}
+  app_cargo_data: {}
+  app_build_data: {}
+  app_deps_data: {}
+  app_native_data: {}
 
 services:
   app:
@@ -44,6 +48,10 @@ services:
     tty: true
     volumes:
       - .:/srv/philomena
+      - app_cargo_data:/srv/philomena/.cargo
+      - app_build_data:/srv/philomena/_build
+      - app_deps_data:/srv/philomena/deps
+      - app_native_data:/srv/philomena/priv/native
     depends_on:
       - postgres
       - elasticsearch

From 65da36369d03561f75dba9f179b6696b6278329d Mon Sep 17 00:00:00 2001
From: Eliot Partridge <byte@code.horse>
Date: Tue, 14 May 2024 21:32:45 -0400
Subject: [PATCH 04/14] Pause spoilered videos on image pages, unpause on
 unspoiler (#259)

* Pause spoilered videos on image pages, unpause on unspoiler

* Add test

* Fix comment
---
 assets/js/image_expansion.js            |  5 +++--
 assets/js/utils/__tests__/image.spec.ts | 13 +++++++++++++
 assets/js/utils/image.ts                |  6 ++++++
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/assets/js/image_expansion.js b/assets/js/image_expansion.js
index 66cc379e..7bd6cb26 100644
--- a/assets/js/image_expansion.js
+++ b/assets/js/image_expansion.js
@@ -87,11 +87,12 @@ function pickAndResize(elem) {
   }
 
   const muted = store.get('unmute_videos') ? '' : 'muted';
+  const autoplay = elem.classList.contains('hidden') ? '' : 'autoplay'; // Fix for spoilered image pages
 
   if (imageFormat === 'mp4') {
     elem.classList.add('full-height');
     elem.insertAdjacentHTML('afterbegin',
-      `<video controls autoplay loop ${muted} playsinline preload="auto" id="image-display"
+      `<video controls ${autoplay} loop ${muted} playsinline preload="auto" id="image-display"
            width="${imageWidth}" height="${imageHeight}">
         <source src="${uris.webm}" type="video/webm">
         <source src="${uris.mp4}" type="video/mp4">
@@ -104,7 +105,7 @@ function pickAndResize(elem) {
   }
   else if (imageFormat === 'webm') {
     elem.insertAdjacentHTML('afterbegin',
-      `<video controls autoplay loop ${muted} playsinline id="image-display">
+      `<video controls ${autoplay} loop ${muted} playsinline id="image-display">
         <source src="${uri}" type="video/webm">
         <source src="${uri.replace(/webm$/, 'mp4')}" type="video/mp4">
         <p class="block block--fixed block--warning">
diff --git a/assets/js/utils/__tests__/image.spec.ts b/assets/js/utils/__tests__/image.spec.ts
index b091380d..f27a1cd1 100644
--- a/assets/js/utils/__tests__/image.spec.ts
+++ b/assets/js/utils/__tests__/image.spec.ts
@@ -369,6 +369,19 @@ describe('Image utils', () => {
       expect(mockShowElement).toHaveClass(spoilerPendingClass);
     });
 
+    it('should play the video if it is present', () => {
+      const mockElement = document.createElement('div');
+      const { mockShowElement } = createImageShowElement(mockElement);
+      const mockVideo = document.createElement('video');
+      mockShowElement.appendChild(mockVideo);
+
+      const playSpy = vi.spyOn(mockVideo, 'play').mockReturnValue(Promise.resolve());
+
+      showBlock(mockElement);
+
+      expect(playSpy).toHaveBeenCalledTimes(1);
+    });
+
     it('should not throw if image-filtered element is missing', () => {
       const mockElement = document.createElement('div');
       createImageShowElement(mockElement);
diff --git a/assets/js/utils/image.ts b/assets/js/utils/image.ts
index 2004d11f..99ab2722 100644
--- a/assets/js/utils/image.ts
+++ b/assets/js/utils/image.ts
@@ -64,9 +64,15 @@ export function showThumb(img: HTMLDivElement) {
 export function showBlock(img: HTMLDivElement) {
   img.querySelector('.image-filtered')?.classList.add('hidden');
   const imageShowClasses = img.querySelector('.image-show')?.classList;
+
   if (imageShowClasses) {
     imageShowClasses.remove('hidden');
     imageShowClasses.add('spoiler-pending');
+
+    const vidEl = img.querySelector('video');
+    if (vidEl) {
+      vidEl.play();
+    }
   }
 }
 

From b235f545f259e8cf9c0e16793e1a448b1e9f105b Mon Sep 17 00:00:00 2001
From: liamwhite <liamwhite@users.noreply.github.com>
Date: Sat, 18 May 2024 16:29:27 -0400
Subject: [PATCH 05/14] Truncate incoming referrer string (#260)

---
 lib/philomena_web/plugs/user_attribution_plug.ex | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/philomena_web/plugs/user_attribution_plug.ex b/lib/philomena_web/plugs/user_attribution_plug.ex
index f2fb2ed6..bfbd5da8 100644
--- a/lib/philomena_web/plugs/user_attribution_plug.ex
+++ b/lib/philomena_web/plugs/user_attribution_plug.ex
@@ -24,7 +24,7 @@ defmodule PhilomenaWeb.UserAttributionPlug do
     attributes = [
       ip: remote_ip,
       fingerprint: fingerprint(conn, conn.path_info),
-      referrer: conn.assigns.referrer,
+      referrer: referrer(conn.assigns.referrer),
       user: user,
       user_agent: user_agent(conn)
     ]
@@ -47,4 +47,7 @@ defmodule PhilomenaWeb.UserAttributionPlug do
   defp fingerprint(conn, _) do
     conn.cookies["_ses"]
   end
+
+  defp referrer(nil), do: nil
+  defp referrer(r), do: String.slice(r, 0, 255)
 end

From b9db9064c95c927af1c1c2a015560c11867e5cd5 Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Sun, 19 May 2024 14:48:53 -0400
Subject: [PATCH 06/14] Update comrak to 0.24.1

---
 native/philomena/Cargo.lock | 57 +++++++++++++++----------------------
 1 file changed, 23 insertions(+), 34 deletions(-)

diff --git a/native/philomena/Cargo.lock b/native/philomena/Cargo.lock
index 1c6c6b60..0ca74719 100644
--- a/native/philomena/Cargo.lock
+++ b/native/philomena/Cargo.lock
@@ -43,8 +43,8 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
 [[package]]
 name = "comrak"
-version = "0.23.0"
-source = "git+https://github.com/philomena-dev/comrak?branch=main#4c7cd1a1aa2db546ff253b69950d01e8f8aebd3a"
+version = "0.24.1"
+source = "git+https://github.com/philomena-dev/comrak?branch=main#6a03dabfc80033b24070dc5826c9225686e3a98a"
 dependencies = [
  "derive_builder",
  "entities",
@@ -59,9 +59,9 @@ dependencies = [
 
 [[package]]
 name = "darling"
-version = "0.14.4"
+version = "0.20.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b750cb3417fd1b327431a470f388520309479ab0bf5e323505daf0290cd3850"
+checksum = "83b2eb4d90d12bdda5ed17de686c2acb4c57914f8f921b8da7e112b5a36f3fe1"
 dependencies = [
  "darling_core",
  "darling_macro",
@@ -69,58 +69,58 @@ dependencies = [
 
 [[package]]
 name = "darling_core"
-version = "0.14.4"
+version = "0.20.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "109c1ca6e6b7f82cc233a97004ea8ed7ca123a9af07a8230878fcfda9b158bf0"
+checksum = "622687fe0bac72a04e5599029151f5796111b90f1baaa9b544d807a5e31cd120"
 dependencies = [
  "fnv",
  "ident_case",
  "proc-macro2",
  "quote",
  "strsim",
- "syn 1.0.109",
+ "syn",
 ]
 
 [[package]]
 name = "darling_macro"
-version = "0.14.4"
+version = "0.20.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4aab4dbc9f7611d8b55048a3a16d2d010c2c8334e46304b40ac1cc14bf3b48e"
+checksum = "733cabb43482b1a1b53eee8583c2b9e8684d592215ea83efd305dd31bc2f0178"
 dependencies = [
  "darling_core",
  "quote",
- "syn 1.0.109",
+ "syn",
 ]
 
 [[package]]
 name = "derive_builder"
-version = "0.12.0"
+version = "0.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d67778784b508018359cbc8696edb3db78160bab2c2a28ba7f56ef6932997f8"
+checksum = "0350b5cb0331628a5916d6c5c0b72e97393b8b6b03b47a9284f4e7f5a405ffd7"
 dependencies = [
  "derive_builder_macro",
 ]
 
 [[package]]
 name = "derive_builder_core"
-version = "0.12.0"
+version = "0.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c11bdc11a0c47bc7d37d582b5285da6849c96681023680b906673c5707af7b0f"
+checksum = "d48cda787f839151732d396ac69e3473923d54312c070ee21e9effcaa8ca0b1d"
 dependencies = [
  "darling",
  "proc-macro2",
  "quote",
- "syn 1.0.109",
+ "syn",
 ]
 
 [[package]]
 name = "derive_builder_macro"
-version = "0.12.0"
+version = "0.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebcda35c7a396850a55ffeac740804b40ffec779b98fffbb1738f4033f0ee79e"
+checksum = "206868b8242f27cecce124c19fd88157fbd0dd334df2587f36417bafbc85097b"
 dependencies = [
  "derive_builder_core",
- "syn 1.0.109",
+ "syn",
 ]
 
 [[package]]
@@ -348,7 +348,7 @@ dependencies = [
  "heck",
  "proc-macro2",
  "quote",
- "syn 2.0.59",
+ "syn",
 ]
 
 [[package]]
@@ -379,20 +379,9 @@ checksum = "6e63cff320ae2c57904679ba7cb63280a3dc4613885beafb148ee7bf9aa9042d"
 
 [[package]]
 name = "strsim"
-version = "0.10.0"
+version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623"
-
-[[package]]
-name = "syn"
-version = "1.0.109"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
 
 [[package]]
 name = "syn"
@@ -506,7 +495,7 @@ dependencies = [
  "once_cell",
  "proc-macro2",
  "quote",
- "syn 2.0.59",
+ "syn",
  "wasm-bindgen-shared",
 ]
 
@@ -528,7 +517,7 @@ checksum = "e94f17b526d0a461a191c78ea52bbce64071ed5c04c9ffe424dcb38f74171bb7"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.59",
+ "syn",
  "wasm-bindgen-backend",
  "wasm-bindgen-shared",
 ]

From 721432255e18d0d81555c0ab5674a1e6084a12ad Mon Sep 17 00:00:00 2001
From: "Luna D." <luna@nighty.cloud>
Date: Thu, 23 May 2024 18:08:51 +0200
Subject: [PATCH 07/14] switch to valkey

---
 docker-compose.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index a5034ca0..7ba4875b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -32,7 +32,7 @@ services:
       - BADGE_URL_ROOT=/badge-img
       - TAG_URL_ROOT=/tag-img
       - ELASTICSEARCH_URL=http://elasticsearch:9200
-      - REDIS_HOST=redis
+      - REDIS_HOST=valkey
       - DATABASE_URL=ecto://postgres:postgres@postgres/philomena_dev
       - CDN_HOST=localhost
       - MAILER_ADDRESS=noreply@philomena.local
@@ -55,7 +55,7 @@ services:
     depends_on:
       - postgres
       - elasticsearch
-      - redis
+      - valkey
     ports:
       - '5173:5173'
 
@@ -81,8 +81,8 @@ services:
         soft: 65536
         hard: 65536
 
-  redis:
-    image: redis:7.2.4-alpine
+  valkey:
+    image: valkey/valkey:7.2.5-alpine
     logging:
       driver: "none"
 

From dea3bd913c7693d26c446ee6c553c0fc79f1116c Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Thu, 23 May 2024 15:29:16 -0400
Subject: [PATCH 08/14] Respect max_clause_count

---
 lib/philomena/search/parser.ex | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/lib/philomena/search/parser.ex b/lib/philomena/search/parser.ex
index aaba8df7..b2f5e47e 100644
--- a/lib/philomena/search/parser.ex
+++ b/lib/philomena/search/parser.ex
@@ -29,6 +29,8 @@ defmodule Philomena.Search.Parser do
     __data__: nil
   ]
 
+  @max_clause_count 512
+
   def parser(options) do
     parser = struct(Parser, options)
 
@@ -305,14 +307,16 @@ defmodule Philomena.Search.Parser do
 
   # Flattens the child of a disjunction or conjunction to improve performance.
   defp flatten_disjunction_child(this_child, %{bool: %{should: next_child}} = child)
-       when child == %{bool: %{should: next_child}} and is_list(next_child),
+       when child == %{bool: %{should: next_child}} and is_list(next_child) and
+              length(next_child) <= @max_clause_count,
        do: %{bool: %{should: [this_child | next_child]}}
 
   defp flatten_disjunction_child(this_child, next_child),
     do: %{bool: %{should: [this_child, next_child]}}
 
   defp flatten_conjunction_child(this_child, %{bool: %{must: next_child}} = child)
-       when child == %{bool: %{must: next_child}} and is_list(next_child),
+       when child == %{bool: %{must: next_child}} and is_list(next_child) and
+              length(next_child) <= @max_clause_count,
        do: %{bool: %{must: [this_child | next_child]}}
 
   defp flatten_conjunction_child(this_child, next_child),

From ee12e0aaadf11cdc8ed376a3ea6ed312f0dbbb19 Mon Sep 17 00:00:00 2001
From: Nighty <luna@nighty.cloud>
Date: Fri, 24 May 2024 22:36:00 +0200
Subject: [PATCH 09/14] forgor

---
 docker/app/run-test | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/app/run-test b/docker/app/run-test
index 4c120740..679a438c 100755
--- a/docker/app/run-test
+++ b/docker/app/run-test
@@ -9,7 +9,7 @@ export MIX_ENV=test
 # if it's not done doing whatever it does yet
 echo -n "Waiting for Elasticsearch"
 
-until wget -qO - elasticsearch:9200; do
+until wget -qO - opensearch:9200; do
   echo -n "."
   sleep 2
 done

From 194b2686f6f29e1432d30fbb33879650ee9b89c4 Mon Sep 17 00:00:00 2001
From: Nighty <luna@nighty.cloud>
Date: Fri, 24 May 2024 22:58:18 +0200
Subject: [PATCH 10/14] Migrate to OpenSearch (#186)

* Migrate to OpenSearch

* opensearch security is stupid

* forgor

---------

Co-authored-by: byte[] <byteslice@airmail.cc>
---
 config/runtime.exs               |  6 +++++-
 docker-compose.yml               | 15 +++++++--------
 docker/app/run-development       |  6 +++---
 docker/opensearch/opensearch.yml | 15 +++++++++++++++
 lib/philomena/elasticsearch.ex   |  2 +-
 5 files changed, 31 insertions(+), 13 deletions(-)
 create mode 100644 docker/opensearch/opensearch.yml

diff --git a/config/runtime.exs b/config/runtime.exs
index 9cd91ed5..4257ed9e 100644
--- a/config/runtime.exs
+++ b/config/runtime.exs
@@ -15,7 +15,7 @@ config :philomena,
   anonymous_name_salt: System.fetch_env!("ANONYMOUS_NAME_SALT"),
   hcaptcha_secret_key: System.fetch_env!("HCAPTCHA_SECRET_KEY"),
   hcaptcha_site_key: System.fetch_env!("HCAPTCHA_SITE_KEY"),
-  elasticsearch_url: System.get_env("ELASTICSEARCH_URL", "http://localhost:9200"),
+  opensearch_url: System.get_env("OPENSEARCH_URL", "https://admin:admin@localhost:9200"),
   advert_file_root: System.fetch_env!("ADVERT_FILE_ROOT"),
   avatar_file_root: System.fetch_env!("AVATAR_FILE_ROOT"),
   badge_file_root: System.fetch_env!("BADGE_FILE_ROOT"),
@@ -91,6 +91,10 @@ config :philomena, :s3_secondary_options,
 
 config :philomena, :s3_secondary_bucket, System.get_env("ALT_S3_BUCKET")
 
+# Don't bail on OpenSearch's self-signed certificate
+config :elastix,
+  httpoison_options: [ssl: [verify: :verify_none]]
+
 config :ex_aws, :hackney_opts,
   timeout: 180_000,
   recv_timeout: 180_000,
diff --git a/docker-compose.yml b/docker-compose.yml
index 7ba4875b..b4d57ea2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,7 @@
 version: '3'
 volumes:
   postgres_data: {}
-  elastic_data: {}
+  opensearch_data: {}
   app_cargo_data: {}
   app_build_data: {}
   app_deps_data: {}
@@ -31,7 +31,7 @@ services:
       - IMAGE_URL_ROOT=/img
       - BADGE_URL_ROOT=/badge-img
       - TAG_URL_ROOT=/tag-img
-      - ELASTICSEARCH_URL=http://elasticsearch:9200
+      - OPENSEARCH_URL=http://opensearch:9200
       - REDIS_HOST=valkey
       - DATABASE_URL=ecto://postgres:postgres@postgres/philomena_dev
       - CDN_HOST=localhost
@@ -54,7 +54,7 @@ services:
       - app_native_data:/srv/philomena/priv/native
     depends_on:
       - postgres
-      - elasticsearch
+      - opensearch
       - valkey
     ports:
       - '5173:5173'
@@ -68,14 +68,13 @@ services:
     logging:
       driver: "none"
 
-  elasticsearch:
-    image: elasticsearch:7.9.3
+  opensearch:
+    image: opensearchproject/opensearch:2.14.0
     volumes:
-      - elastic_data:/usr/share/elasticsearch/data
+      - opensearch_data:/usr/share/opensearch/data
+      - ./docker/opensearch/opensearch.yml:/usr/share/opensearch/config/opensearch.yml
     logging:
       driver: "none"
-    environment:
-      - discovery.type=single-node
     ulimits:
       nofile:
         soft: 65536
diff --git a/docker/app/run-development b/docker/app/run-development
index 4e03fab9..39900c76 100755
--- a/docker/app/run-development
+++ b/docker/app/run-development
@@ -34,11 +34,11 @@ npm install
 # Always install mix dependencies
 (cd /srv/philomena && mix deps.get)
 
-# Sleep to allow Elasticsearch to finish initializing
+# Sleep to allow OpenSearch to finish initializing
 # if it's not done doing whatever it does yet
-echo -n "Waiting for Elasticsearch"
+echo -n "Waiting for OpenSearch"
 
-until wget -qO - elasticsearch:9200; do
+until wget --no-check-certificate -qO - http://opensearch:9200; do
   echo -n "."
   sleep 2
 done
diff --git a/docker/opensearch/opensearch.yml b/docker/opensearch/opensearch.yml
new file mode 100644
index 00000000..afb4d34c
--- /dev/null
+++ b/docker/opensearch/opensearch.yml
@@ -0,0 +1,15 @@
+---
+cluster.name: docker-cluster
+
+# Bind to all interfaces because we don't know what IP address Docker will assign to us.
+network.host: 0.0.0.0
+
+# Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
+discovery.type: single-node
+
+# Disable security. We don't need it for dev environment.
+# Also, whoever thought it's a GREAT IDEA TO ENFORCE SECURITY FEATURES
+# BY DEFAULT IN A FREAKING DOCKER CONTAINER should be forced to play
+# the password game every time they would like to create a new account
+# anywhere whatsoever.
+plugins.security.disabled: true
diff --git a/lib/philomena/elasticsearch.ex b/lib/philomena/elasticsearch.ex
index 68bf92e5..a85bfc50 100644
--- a/lib/philomena/elasticsearch.ex
+++ b/lib/philomena/elasticsearch.ex
@@ -30,7 +30,7 @@ defmodule Philomena.Elasticsearch do
   defp index_for(Filter), do: FilterIndex
 
   defp elastic_url do
-    Application.get_env(:philomena, :elasticsearch_url)
+    Application.get_env(:philomena, :opensearch_url)
   end
 
   def create_index!(module) do

From f232f38d9193c19c8092592a1ed4f8461f5c26ac Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Sat, 27 Apr 2024 22:58:43 -0400
Subject: [PATCH 11/14] Add verified routes to web

---
 lib/philomena_web.ex                              | 15 +++++++++++++++
 .../controllers/channel_controller.ex             | 10 +++++-----
 lib/philomena_web/plugs/tor_plug.ex               |  2 ++
 lib/philomena_web/plugs/totp_plug.ex              |  1 +
 lib/philomena_web/user_auth.ex                    |  2 ++
 test/support/conn_case.ex                         |  2 ++
 6 files changed, 27 insertions(+), 5 deletions(-)

diff --git a/lib/philomena_web.ex b/lib/philomena_web.ex
index 8831505b..4a8fbcb8 100644
--- a/lib/philomena_web.ex
+++ b/lib/philomena_web.ex
@@ -17,6 +17,8 @@ defmodule PhilomenaWeb do
   and import those modules here.
   """
 
+  def static_paths, do: ~w(assets images favicon.ico favicon.svg robots.txt)
+
   def controller do
     quote do
       use Phoenix.Controller, namespace: PhilomenaWeb
@@ -26,6 +28,8 @@ defmodule PhilomenaWeb do
       import Canary.Plugs
       import PhilomenaWeb.ModerationLogPlug, only: [moderation_log: 2]
       alias PhilomenaWeb.Router.Helpers, as: Routes
+
+      unquote(verified_routes())
     end
   end
 
@@ -47,6 +51,8 @@ defmodule PhilomenaWeb do
 
       # Wrong way around for convenience
       import PhilomenaWeb.AppView
+
+      unquote(verified_routes())
     end
   end
 
@@ -65,6 +71,15 @@ defmodule PhilomenaWeb do
     end
   end
 
+  def verified_routes do
+    quote do
+      use Phoenix.VerifiedRoutes,
+        endpoint: PhilomenaWeb.Endpoint,
+        router: PhilomenaWeb.Router,
+        statics: PhilomenaWeb.static_paths()
+    end
+  end
+
   @doc """
   When used, dispatch to the appropriate controller/view/etc.
   """
diff --git a/lib/philomena_web/controllers/channel_controller.ex b/lib/philomena_web/controllers/channel_controller.ex
index 24684dc4..973017d3 100644
--- a/lib/philomena_web/controllers/channel_controller.ex
+++ b/lib/philomena_web/controllers/channel_controller.ex
@@ -39,7 +39,7 @@ defmodule PhilomenaWeb.ChannelController do
 
     if user, do: Channels.clear_notification(channel, user)
 
-    redirect(conn, external: url(channel))
+    redirect(conn, external: channel_url(channel))
   end
 
   def new(conn, _params) do
@@ -101,15 +101,15 @@ defmodule PhilomenaWeb.ChannelController do
   defp maybe_show_nsfw(query, true), do: query
   defp maybe_show_nsfw(query, _falsy), do: where(query, [c], c.nsfw == false)
 
-  defp url(%{type: "LivestreamChannel", short_name: short_name}),
+  defp channel_url(%{type: "LivestreamChannel", short_name: short_name}),
     do: "http://www.livestream.com/#{short_name}"
 
-  defp url(%{type: "PicartoChannel", short_name: short_name}),
+  defp channel_url(%{type: "PicartoChannel", short_name: short_name}),
     do: "https://picarto.tv/#{short_name}"
 
-  defp url(%{type: "PiczelChannel", short_name: short_name}),
+  defp channel_url(%{type: "PiczelChannel", short_name: short_name}),
     do: "https://piczel.tv/watch/#{short_name}"
 
-  defp url(%{type: "TwitchChannel", short_name: short_name}),
+  defp channel_url(%{type: "TwitchChannel", short_name: short_name}),
     do: "https://www.twitch.tv/#{short_name}"
 end
diff --git a/lib/philomena_web/plugs/tor_plug.ex b/lib/philomena_web/plugs/tor_plug.ex
index 1cd51f70..8e6cc4e3 100644
--- a/lib/philomena_web/plugs/tor_plug.ex
+++ b/lib/philomena_web/plugs/tor_plug.ex
@@ -7,6 +7,8 @@ defmodule PhilomenaWeb.TorPlug do
       plug PhilomenaWeb.TorPlug
   """
   alias PhilomenaWeb.Router.Helpers, as: Routes
+  use PhilomenaWeb, :verified_routes
+
   alias Phoenix.Controller
   alias Plug.Conn
 
diff --git a/lib/philomena_web/plugs/totp_plug.ex b/lib/philomena_web/plugs/totp_plug.ex
index 9d8665c9..30f87378 100644
--- a/lib/philomena_web/plugs/totp_plug.ex
+++ b/lib/philomena_web/plugs/totp_plug.ex
@@ -8,6 +8,7 @@ defmodule PhilomenaWeb.TotpPlug do
   """
 
   alias PhilomenaWeb.Router.Helpers, as: Routes
+  use PhilomenaWeb, :verified_routes
 
   @doc false
   @spec init(any()) :: any()
diff --git a/lib/philomena_web/user_auth.ex b/lib/philomena_web/user_auth.ex
index 84b79a70..af7166cf 100644
--- a/lib/philomena_web/user_auth.ex
+++ b/lib/philomena_web/user_auth.ex
@@ -7,6 +7,8 @@ defmodule PhilomenaWeb.UserAuth do
   alias PhilomenaWeb.UserIpUpdater
   alias PhilomenaWeb.UserFingerprintUpdater
 
+  use PhilomenaWeb, :verified_routes
+
   # Make the remember me cookie valid for 365 days.
   # If you want bump or reduce this value, also change
   # the token expiry itself in UserToken.
diff --git a/test/support/conn_case.ex b/test/support/conn_case.ex
index aafac224..151ed056 100644
--- a/test/support/conn_case.ex
+++ b/test/support/conn_case.ex
@@ -25,6 +25,8 @@ defmodule PhilomenaWeb.ConnCase do
 
       # The default endpoint for testing
       @endpoint PhilomenaWeb.Endpoint
+
+      use PhilomenaWeb, :verified_routes
     end
   end
 

From c64606ae024d0146ef8e8619f37ddbc6f804a866 Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Sun, 28 Apr 2024 20:29:36 -0400
Subject: [PATCH 12/14] Fix comment routes

---
 lib/philomena/users.ex | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/lib/philomena/users.ex b/lib/philomena/users.ex
index 0ce7a825..b971f0c9 100644
--- a/lib/philomena/users.ex
+++ b/lib/philomena/users.ex
@@ -213,12 +213,12 @@ defmodule Philomena.Users do
     |> Ecto.Multi.delete_all(:tokens, UserToken.user_and_contexts_query(user, [context]))
   end
 
-  @doc """
+  @doc ~S"""
   Delivers the update email instructions to the given user.
 
   ## Examples
 
-      iex> deliver_update_email_instructions(user, current_email, &Routes.user_update_email_url(conn, :edit, &1))
+      iex> deliver_update_email_instructions(user, current_email, &url(~p"/registrations/email/#{&1})")
       {:ok, %{to: ..., body: ...}}
 
   """
@@ -263,12 +263,12 @@ defmodule Philomena.Users do
     |> Repo.update()
   end
 
-  @doc """
+  @doc ~S"""
   Delivers the unlock instructions to the given user.
 
   ## Examples
 
-    iex> deliver_user_unlock_instructions(user, &Routes.unlock_url(conn, :show, &1))
+    iex> deliver_user_unlock_instructions(user, &url(~p"/unlocks/#{&1}"))
     {:ok, %{to: ..., body: ...}}
 
   """
@@ -379,15 +379,15 @@ defmodule Philomena.Users do
 
   ## Confirmation
 
-  @doc """
+  @doc ~S"""
   Delivers the confirmation email instructions to the given user.
 
   ## Examples
 
-      iex> deliver_user_confirmation_instructions(user, &Routes.user_confirmation_url(conn, :confirm, &1))
+      iex> deliver_user_confirmation_instructions(user, &url(~p"/confirmations/#{&1}"))
       {:ok, %{to: ..., body: ...}}
 
-      iex> deliver_user_confirmation_instructions(confirmed_user, &Routes.user_confirmation_url(conn, :confirm, &1))
+      iex> deliver_user_confirmation_instructions(confirmed_user, &url(~p"/confirmations/#{&1}"))
       {:error, :already_confirmed}
 
   """
@@ -426,12 +426,12 @@ defmodule Philomena.Users do
 
   ## Reset password
 
-  @doc """
+  @doc ~S"""
   Delivers the reset password email to the given user.
 
   ## Examples
 
-      iex> deliver_user_reset_password_instructions(user, &Routes.user_reset_password_url(conn, :edit, &1))
+      iex> deliver_user_reset_password_instructions(user, &url(~p"/passwords/#{&1}/edit"))
       {:ok, %{to: ..., body: ...}}
 
   """

From 2f7f1b38029e67c20dacf0ef4eb1c10a9d1b9aff Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Sat, 27 Apr 2024 23:01:16 -0400
Subject: [PATCH 13/14] Remove static paths

---
 lib/philomena_web.ex                              |  2 +-
 lib/philomena_web/templates/error/show.html.slime |  4 ++--
 .../templates/image/_image_target.html.slime      |  2 +-
 lib/philomena_web/templates/layout/app.html.slime | 10 +++++-----
 .../templates/layout/two_factor.html.slime        |  4 ++--
 .../templates/setting/edit.html.slime             |  2 +-
 lib/philomena_web/views/error_view.ex             |  4 ++--
 lib/philomena_web/views/layout_view.ex            | 15 ++++-----------
 lib/philomena_web/views/setting_view.ex           |  8 ++++----
 9 files changed, 22 insertions(+), 29 deletions(-)

diff --git a/lib/philomena_web.ex b/lib/philomena_web.ex
index 4a8fbcb8..f7234480 100644
--- a/lib/philomena_web.ex
+++ b/lib/philomena_web.ex
@@ -17,7 +17,7 @@ defmodule PhilomenaWeb do
   and import those modules here.
   """
 
-  def static_paths, do: ~w(assets images favicon.ico favicon.svg robots.txt)
+  def static_paths, do: ~w(assets favicon.ico favicon.svg robots.txt)
 
   def controller do
     quote do
diff --git a/lib/philomena_web/templates/error/show.html.slime b/lib/philomena_web/templates/error/show.html.slime
index c0256043..a48ae8f3 100644
--- a/lib/philomena_web/templates/error/show.html.slime
+++ b/lib/philomena_web/templates/error/show.html.slime
@@ -8,8 +8,8 @@ html lang="en"
     title
       => @status
       | - Philomena
-    link rel="stylesheet" href=stylesheet_path(@conn, nil)
-    link rel="stylesheet" href=dark_stylesheet_path(@conn) media="(prefers-color-scheme: dark)"
+    link rel="stylesheet" href=stylesheet_path(nil)
+    link rel="stylesheet" href=dark_stylesheet_path() media="(prefers-color-scheme: dark)"
     link rel="icon" href="/favicon.ico" type="image/x-icon"
     link rel="icon" href="/favicon.svg" type="image/svg+xml"
 
diff --git a/lib/philomena_web/templates/image/_image_target.html.slime b/lib/philomena_web/templates/image/_image_target.html.slime
index 45315404..3443c74a 100644
--- a/lib/philomena_web/templates/image/_image_target.html.slime
+++ b/lib/philomena_web/templates/image/_image_target.html.slime
@@ -6,7 +6,7 @@
     strong
       = link("This image is blocked by your current filter - click here to display it anyway", to: "#", data: [click_unfilter: @image.id])
     p
-      = img_tag(Routes.static_path(PhilomenaWeb.Endpoint, "/images/tagblocked.svg"), width: 250, height: 250, data: [click_unfilter: @image.id])
+      = img_tag(static_path(@conn, "/images/tagblocked.svg"), width: 250, height: 250, data: [click_unfilter: @image.id])
     span.filter-explanation
     =< link("your current filter", to: Routes.filter_path(@conn, :show, @conn.assigns.current_filter), class: "filter-link")
     ' .
diff --git a/lib/philomena_web/templates/layout/app.html.slime b/lib/philomena_web/templates/layout/app.html.slime
index e86528eb..29013972 100644
--- a/lib/philomena_web/templates/layout/app.html.slime
+++ b/lib/philomena_web/templates/layout/app.html.slime
@@ -10,11 +10,11 @@ html lang="en"
         ' - Derpibooru
       - else
         ' Derpibooru
-    link rel="stylesheet" href=stylesheet_path(@conn, @current_user)
+    link rel="stylesheet" href=stylesheet_path(@current_user)
     = if is_nil(@current_user) do
-      link rel="stylesheet" href=dark_stylesheet_path(@conn) media="(prefers-color-scheme: dark)"
-    link rel="icon" href="/favicon.ico" type="image/x-icon"
-    link rel="icon" href="/favicon.svg" type="image/svg+xml"
+      link rel="stylesheet" href=dark_stylesheet_path() media="(prefers-color-scheme: dark)"
+    link rel="icon" href=~p"/favicon.ico" type="image/x-icon"
+    link rel="icon" href=~p"/favicon.svg" type="image/svg+xml"
     meta name="generator" content="philomena"
     meta name="theme-color" content="#618fc3"
     meta name="format-detection" content="telephone=no"
@@ -24,7 +24,7 @@ html lang="en"
       script type="module" src="http://localhost:5173/@vite/client"
       script type="module" src="http://localhost:5173/js/app.js"
     - else
-      script type="text/javascript" src=Routes.static_path(@conn, "/js/app.js") async="async"
+      script type="text/javascript" src=~p"/js/app.js" async="async"
     = render PhilomenaWeb.LayoutView, "_opengraph.html", assigns
   body data-theme=theme_name(@current_user) data-vite-reload=to_string(vite_reload?())
     = render PhilomenaWeb.LayoutView, "_burger.html", assigns
diff --git a/lib/philomena_web/templates/layout/two_factor.html.slime b/lib/philomena_web/templates/layout/two_factor.html.slime
index 2d2fc4bb..416a8732 100644
--- a/lib/philomena_web/templates/layout/two_factor.html.slime
+++ b/lib/philomena_web/templates/layout/two_factor.html.slime
@@ -6,8 +6,8 @@ html lang="en"
     = viewport_meta_tag(@conn)
 
     title Two Factor Authentication - Derpibooru
-    link rel="stylesheet" href=stylesheet_path(@conn, nil)
-    link rel="stylesheet" href=dark_stylesheet_path(@conn) media="(prefers-color-scheme: dark)"
+    link rel="stylesheet" href=stylesheet_path(nil)
+    link rel="stylesheet" href=dark_stylesheet_path() media="(prefers-color-scheme: dark)"
     link rel="icon" href="/favicon.ico" type="image/x-icon"
     link rel="icon" href="/favicon.svg" type="image/svg+xml"
 
diff --git a/lib/philomena_web/templates/setting/edit.html.slime b/lib/philomena_web/templates/setting/edit.html.slime
index 92e13038..2809de42 100644
--- a/lib/philomena_web/templates/setting/edit.html.slime
+++ b/lib/philomena_web/templates/setting/edit.html.slime
@@ -79,7 +79,7 @@ h1 Content Settings
                 ' For 1080p monitors, try 24.
           .field
             => label f, :theme
-            => select f, :theme, theme_options(@conn), class: "input"
+            => select f, :theme, theme_options(), class: "input"
             = error_tag f, :theme
             .fieldlabel: i Preview themes by selecting one from the dropdown. Saving sets the currently selected theme.
           .field
diff --git a/lib/philomena_web/views/error_view.ex b/lib/philomena_web/views/error_view.ex
index 8bf8c1d0..9e1d8566 100644
--- a/lib/philomena_web/views/error_view.ex
+++ b/lib/philomena_web/views/error_view.ex
@@ -3,8 +3,8 @@ defmodule PhilomenaWeb.ErrorView do
 
   import PhilomenaWeb.LayoutView,
     only: [
-      stylesheet_path: 2,
-      dark_stylesheet_path: 1,
+      stylesheet_path: 1,
+      dark_stylesheet_path: 0,
       viewport_meta_tag: 1
     ]
 
diff --git a/lib/philomena_web/views/layout_view.ex b/lib/philomena_web/views/layout_view.ex
index fe338f09..b9c2210b 100644
--- a/lib/philomena_web/views/layout_view.ex
+++ b/lib/philomena_web/views/layout_view.ex
@@ -69,17 +69,10 @@ defmodule PhilomenaWeb.LayoutView do
     Config.get(:footer)
   end
 
-  def stylesheet_path(conn, %{theme: "dark"}),
-    do: Routes.static_path(conn, "/css/dark.css")
-
-  def stylesheet_path(conn, %{theme: "red"}),
-    do: Routes.static_path(conn, "/css/red.css")
-
-  def stylesheet_path(conn, _user),
-    do: Routes.static_path(conn, "/css/default.css")
-
-  def dark_stylesheet_path(conn),
-    do: Routes.static_path(conn, "/css/dark.css")
+  def stylesheet_path(%{theme: "dark"}), do: ~p"/css/dark.css"
+  def stylesheet_path(%{theme: "red"}), do: ~p"/css/red.css"
+  def stylesheet_path(_user), do: ~p"/css/default.css"
+  def dark_stylesheet_path, do: ~p"/css/dark.css"
 
   def theme_name(%{theme: theme}), do: theme
   def theme_name(_user), do: "default"
diff --git a/lib/philomena_web/views/setting_view.ex b/lib/philomena_web/views/setting_view.ex
index df313385..ac08b4fc 100644
--- a/lib/philomena_web/views/setting_view.ex
+++ b/lib/philomena_web/views/setting_view.ex
@@ -1,15 +1,15 @@
 defmodule PhilomenaWeb.SettingView do
   use PhilomenaWeb, :view
 
-  def theme_options(conn) do
+  def theme_options do
     [
       [
         key: "Default",
         value: "default",
-        data: [theme_path: Routes.static_path(conn, "/css/default.css")]
+        data: [theme_path: ~p"/css/default.css"]
       ],
-      [key: "Dark", value: "dark", data: [theme_path: Routes.static_path(conn, "/css/dark.css")]],
-      [key: "Red", value: "red", data: [theme_path: Routes.static_path(conn, "/css/red.css")]]
+      [key: "Dark", value: "dark", data: [theme_path: ~p"/css/dark.css"]],
+      [key: "Red", value: "red", data: [theme_path: ~p"/css/red.css"]]
     ]
   end
 

From 974d2109e2afbc066a2470ddea3f1c5e3ad44945 Mon Sep 17 00:00:00 2001
From: Liam <byteslice@airmail.cc>
Date: Sun, 28 Apr 2024 17:30:30 -0400
Subject: [PATCH 14/14] Add automatic converter

---
 lib/mix/tasks/convert_to_verified_routes.ex | 233 ++++++++++++++++++++
 1 file changed, 233 insertions(+)
 create mode 100644 lib/mix/tasks/convert_to_verified_routes.ex

diff --git a/lib/mix/tasks/convert_to_verified_routes.ex b/lib/mix/tasks/convert_to_verified_routes.ex
new file mode 100644
index 00000000..ad643d2b
--- /dev/null
+++ b/lib/mix/tasks/convert_to_verified_routes.ex
@@ -0,0 +1,233 @@
+defmodule Mix.Tasks.ConvertToVerifiedRoutes do
+  @moduledoc """
+  Replaces routes with verified routes.
+  Forked from
+      https://gist.github.com/andreaseriksson/e454b9244a734310d4ab74d8595f98cd
+      https://gist.github.com/jiegillet/e6357c82e36a848ad59295eb3d5a1135
+
+  This requires all routes to consistently be aliased with
+      alias PhilomenaWeb.Router.Helpers, as: Routes
+
+  Run with
+      mix convert_to_verified_routes
+  """
+
+  use Mix.Task
+
+  @regex ~r/(Routes\.)([a-zA-Z0-9_]+)(path|url)\(/
+  @web_module PhilomenaWeb
+
+  def run(_) do
+    Path.wildcard("test/**/*.ex*")
+    |> Enum.concat(Path.wildcard("lib/**/*.ex*"))
+    |> Enum.concat(Path.wildcard("lib/**/*.eex*"))
+    |> Enum.concat(Path.wildcard("lib/**/*.slime"))
+    |> Enum.sort()
+    |> Enum.reject(&String.contains?(&1, "convert_to_verified_routes.ex"))
+    |> Enum.filter(&(&1 |> File.read!() |> String.contains?("Routes.")))
+    |> Enum.each(&format_file/1)
+
+    :ok
+  end
+
+  def format_file(filename) do
+    Mix.shell().info(filename)
+
+    formatted_content =
+      filename
+      |> File.read!()
+      |> format_string()
+
+    File.write!(filename, [formatted_content])
+  end
+
+  def format_string(source) do
+    case Regex.run(@regex, source, capture: :first, return: :index) do
+      [{index, length}] ->
+        # Compute full length of expression
+        length = nibble_expression(source, index, length)
+
+        # Convert to verified route format
+        route = format_route(String.slice(source, index, length))
+
+        # Split string around expression
+        prefix = String.slice(source, 0, index)
+        suffix = String.slice(source, index + length, String.length(source))
+
+        # Insert verified route and rerun
+        format_string("#{prefix}#{route}#{suffix}")
+
+      _ ->
+        source
+    end
+  end
+
+  defp nibble_expression(source, index, length) do
+    if index + length > String.length(source) do
+      raise "Failed to match route expression"
+    end
+
+    case Code.string_to_quoted(String.slice(source, index, length)) do
+      {:ok, _macro} ->
+        length
+
+      _ ->
+        nibble_expression(source, index, length + 1)
+    end
+  end
+
+  defp format_route(route) do
+    ast =
+      Code.string_to_quoted!(route,
+        literal_encoder: &{:ok, {:__block__, &2, [&1]}},
+        unescape: false,
+        token_metadata: true
+      )
+
+    ast
+    |> Macro.prewalk(&replace_route/1)
+    |> Code.quoted_to_algebra(escape: false)
+    |> Inspect.Algebra.format(:infinity)
+  end
+
+  defp decode_literal(literal) when is_binary(literal) or is_integer(literal) do
+    {:ok, literal}
+  end
+
+  defp decode_literal({:__block__, _, [literal]}) do
+    {:ok, literal}
+  end
+
+  defp decode_literal(node), do: {:error, node}
+
+  defp encode_literal(literal) do
+    {:__block__, [], [literal]}
+  end
+
+  # Routes.url(MyAppWeb.Endpoint)
+  defp replace_route({{:., _, [{:__aliases__, _, [:Routes]}, :url]}, _, [_conn_or_endpoint]}) do
+    {:url, [], [{:sigil_p, [delimiter: "\""], [{:<<>>, [], ["/"]}, []]}]}
+  end
+
+  # Routes.static_path(conn, "/images/favicon.ico")
+  defp replace_route({{:., _, [{:__aliases__, _, [:Routes]}, :static_path]}, _, args}) do
+    [_conn_or_endpoint, path] = args
+
+    case decode_literal(path) do
+      {:ok, path} -> {:sigil_p, [delimiter: "\""], [{:<<>>, [], [path]}, []]}
+      _ -> {:sigil_p, [delimiter: "\""], [path, []]}
+    end
+  end
+
+  # Routes.static_url(conn, "/images/favicon.ico")
+  defp replace_route({{:., _, [{:__aliases__, _, [:Routes]}, :static_url]}, _, args}) do
+    [_conn_or_endpoint, path] = args
+
+    sigil =
+      case decode_literal(path) do
+        {:ok, path} -> {:sigil_p, [delimiter: "\""], [{:<<>>, [], [path]}, []]}
+        _ -> {:sigil_p, [delimiter: "\""], [path, []]}
+      end
+
+    {:url, [], [sigil]}
+  end
+
+  # Routes.some_path(conn, :action, "en", query_params)
+  defp replace_route(
+         {{:., _, [{:__aliases__, _, [:Routes]}, path_name]}, _, [_ | _] = args} = node
+       ) do
+    [_conn_or_endpoint, action | params] = args
+
+    action =
+      case decode_literal(action) do
+        {:ok, action} -> action
+        _ -> action
+      end
+
+    path_name = "#{path_name}"
+
+    case find_verified_route(path_name, action, params) do
+      :ok -> node
+      route -> route
+    end
+  end
+
+  defp replace_route(node), do: node
+
+  defp find_verified_route(path_name, action, arguments) do
+    # pleaaaase don't have a route named Routes.product_url_path(conn, :index)
+    trimmed_path = path_name |> String.trim_trailing("_path") |> String.trim_trailing("_url")
+
+    route =
+      Phoenix.Router.routes(@web_module.Router)
+      |> Enum.find(fn %{helper: helper, plug_opts: plug_opts} ->
+        plug_opts == action && is_binary(helper) && trimmed_path == helper
+      end)
+
+    case route do
+      %{path: path} ->
+        {path_bits, query_params} =
+          path
+          |> String.split("/", trim: true)
+          |> replace_path_variables(arguments, [])
+
+        path_bits =
+          path_bits
+          |> Enum.flat_map(fn bit -> ["/", bit] end)
+          |> format_for_sigil_binary_args(query_params)
+
+        sigil = {:sigil_p, [delimiter: "\""], [{:<<>>, [], path_bits}, []]}
+
+        if String.ends_with?(path_name, "_url") do
+          {:url, [], [sigil]}
+        else
+          sigil
+        end
+
+      _ ->
+        Mix.shell().error(
+          "Could not find route #{path_name}, with action #{inspect(action)} and arguments #{inspect(arguments)}"
+        )
+    end
+  end
+
+  defp replace_path_variables([], arguments, path_bits) do
+    {Enum.reverse(path_bits), arguments}
+  end
+
+  defp replace_path_variables(path, [], path_bits) do
+    {Enum.reverse(path_bits) ++ path, []}
+  end
+
+  # conceptually /post/:post_id -> /post/#{id}
+  defp replace_path_variables([path_piece | rest], [arg | args], path_bits) do
+    if String.starts_with?(path_piece, ":") do
+      replace_path_variables(rest, args, [arg | path_bits])
+    else
+      replace_path_variables(rest, [arg | args], [path_piece | path_bits])
+    end
+  end
+
+  defp format_for_sigil_binary_args(path_bits, [_ | _] = query_params) do
+    format_for_sigil_binary_args(path_bits ++ ["?" | query_params], [])
+  end
+
+  defp format_for_sigil_binary_args(path_bits, []) do
+    path_bits
+    |> Enum.map(&decode_literal/1)
+    |> Enum.map(fn
+      {:ok, bit} when is_binary(bit) ->
+        bit
+
+      {:ok, bit} when is_atom(bit) or is_integer(bit) ->
+        to_string(bit)
+
+      {_, bit} ->
+        {:"::", [],
+         [
+           {{:., [], [Kernel, :to_string]}, [from_interpolation: true], [encode_literal(bit)]},
+           {:binary, [], Elixir}
+         ]}
+    end)
+  end
+end