add json xss

api/handler.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"encoding/json"
 	"net/http"
 
 	"github.com/labstack/echo/v4"
@@ -41,6 +42,25 @@ func handlerGetPost(c echo.Context) error {
 	return c.JSON(http.StatusOK, post)
 }
 
+func handlerGetPostReturnHTML(c echo.Context) error {
+	var post Post
+	postID := c.Param("post_id")
+	query := `
+		SELECT 
+			id, title, content, create_at 
+		FROM
+			posts
+		WHERE
+			id = ?`
+	if err := db.Get(&post, query, postID); err != nil {
+		return c.String(http.StatusNotFound, "記事がありません")
+	}
+
+	p, _ := json.Marshal(post)
+
+	return c.HTML(http.StatusOK, string(p))
+}
+
 func handlerGetComments(c echo.Context) error {
 	var comments []Comment
 	postID := c.Param("post_id")

api/main.go

@@ -26,6 +26,7 @@ func main() {
 	e := echo.New()
 	e.GET("/post/list", handlerGetPostList)
 	e.GET("/post/:post_id", handlerGetPost)
+	e.GET("/post/:post_id/html", handlerGetPostReturnHTML)
 	e.GET("/post/:post_id/comments", handlerGetComments)
 
 	e.POST("/post", handlerCreatePost)