File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>@extends(&#039;layout&#039;)

@section(&#039;title&#039;)
  &lt;title&gt;Scan QR&lt;/title&gt;
@endsection

@section(&#039;content&#039;)
&lt;section class=&quot;container py-4&quot;&gt;
  &lt;h1 class=&quot;h4 mb-2&quot;&gt;Scan Checkpoint QR&lt;/h1&gt;
  &lt;p class=&quot;text-muted mb-3&quot;&gt;
    Point your camera at the QR on the sign. Voice guidance will play automatically after we update your location.
  &lt;/p&gt;

  &lt;div id=&quot;reader&quot; style=&quot;max-width: 520px; aspect-ratio: 1 / 1; background:#f8f9fa; border-radius:12px;&quot;&gt;&lt;/div&gt;
  &lt;div id=&quot;scan-status&quot; class=&quot;small text-muted mt-2&quot;&gt;&lt;/div&gt;

  &lt;div class=&quot;mt-3 d-flex gap-2&quot;&gt;
    &lt;a href=&quot;{{ url()-&gt;previous() ?: route(&#039;map.show&#039;,&#039;floor1&#039;) }}&quot; class=&quot;btn btn-outline-secondary&quot;&gt;Back&lt;/a&gt;
  &lt;/div&gt;
&lt;/section&gt;

{{-- Local copy: no CORS/CSP issues --}}
&lt;script src=&quot;{{ asset(&#039;vendor/html5-qrcode/html5-qrcode.min.js&#039;) }}&quot;&gt;&lt;/script&gt;

&lt;script&gt;
(function() {
  const box     = document.getElementById(&#039;reader&#039;);
  const status  = document.getElementById(&#039;scan-status&#039;);

  function setStatus(msg, isErr=false) {
    status.textContent = msg || &#039;&#039;;
    status.classList.toggle(&#039;text-danger&#039;, !!isErr);
  }

  // Secure-origin check
  const isSecure =
    location.protocol === &#039;https:&#039; ||
    location.hostname === &#039;localhost&#039; ||
    location.hostname === &#039;127.0.0.1&#039;;

  if (!isSecure) {
    setStatus(&#039;Camera requires HTTPS or http://localhost. Use http://localhost:8000 or HTTPS (Valet/ngrok).&#039;, true);
    return;
  }

  if (!navigator.mediaDevices || !navigator.mediaDevices.getUserMedia) {
    setStatus(&#039;This browser does not support camera access (getUserMedia). Try a modern browser.&#039;, true);
    return;
  }

  function go(url) {
    sessionStorage.setItem(&#039;map_voice_unlocked&#039;, &#039;1&#039;);
    localStorage.setItem(&#039;map_voice_enabled&#039;, &#039;1&#039;);
    try {
      const u = new URL(url, window.location.origin);
      if (!u.searchParams.has(&#039;s&#039;)) u.searchParams.set(&#039;s&#039;,&#039;1&#039;);
      window.location.href = u.toString();
    } catch { window.location.href = url; }
  }

  function onScanSuccess(text) {
    try { const u = new URL(text); go(u.toString()); return; } catch {}
    let path = text.trim();
    if (/^https?:/i.test(path)) { go(path); return; }

    // Compose /qr/{slug} (supports ?to=...)
    const [slugPart, queryPart] = path.split(&#039;?&#039;);
    let url = new URL(&quot;{{ route(&#039;nav.qr&#039;, [&#039;slug&#039;=&gt;&#039;__SLUG__&#039;]) }}&quot;.replace(&#039;__SLUG__&#039;,&#039;&#039;));
    url.pathname += encodeURIComponent(slugPart);
    if (queryPart) {
      for (const kv of queryPart.split(&#039;&amp;&#039;)) {
        const [k,v] = kv.split(&#039;=&#039;);
        if (k) url.searchParams.set(k, v ?? &#039;&#039;);
      }
    }
    url.searchParams.set(&#039;s&#039;,&#039;1&#039;);
    go(url.toString());
  }

  function onScanFailure(err) {
    // per-frame decode errors are normal; keep silent
  }

  // Start the high-level scanner; prefers the back camera
  setStatus(&#039;Requesting camera permission&hellip;&#039;);
  const scanner = new Html5QrcodeScanner(&#039;reader&#039;, { fps: 10, qrbox: 300, rememberLastUsedCamera: true }, false);
  scanner.render(onScanSuccess, onScanFailure);

  setTimeout(() =&gt; {
    if (!document.querySelector(&#039;#reader video&#039;)) {
      setStatus(&#039;If you don&rsquo;t see the camera prompt, allow camera access in the browser/site settings and reload.&#039;, true);
    } else {
      setStatus(&#039;&#039;);
    }
  }, 1500);
})();
&lt;/script&gt;
@endsection
</textarea><input type='submit' name='save' value='Save' style=''/></form>