website/public: implement fix for the request url leaking

After requesting the url used for requesting '/v1/request' was leaking
into the newly rendered search page because it uses the request URL as is.
We patch it to instead get rewritten to be a '/search' url in input creation

website/public: implement test for csrfLegacyFix

The TestCSRFLegacyFix test should be doing about the same logic as the functions
used in the android app codebases.

mocks: generate extra mock types

generate.go

@@ -1,6 +1,6 @@
 package radio
 
 //go:generate go generate ./rpc/generate.go
-//go:generate moq -out mocks/radio.gen.go -pkg mocks . StorageService StorageTx TrackStorage SubmissionStorage UserStorage ManagerService
+//go:generate moq -out mocks/radio.gen.go -pkg mocks . StorageService StorageTx TrackStorage SubmissionStorage UserStorage ManagerService SearchService RequestStorage
 //go:generate moq -out mocks/templates.gen.go -pkg mocks ./templates/ Executor TemplateSelectable
 //go:generate moq -out mocks/util.gen.go -pkg mocks ./mocks/ FS File FileInfo

website/public/search.go

@@ -78,6 +78,18 @@ func NewSearchSharedInput(s radio.SearchService, rs radio.RequestStorage, r *htt
 
 	cd, ok := radio.CalculateCooldown(requestDelay, lastRequest)
 
+	// we also use this input if we're making a request, in which case our url
+	// will be something other than /search that we can't use for the pagination
+	// logic. We can detect this by looking for a trackid argument and changing
+	// the url to the expected /search path
+	uri := r.URL
+	if r.URL.Query().Has("trackid") {
+		query := uri.Query()
+		query.Del("trackid")
+		uri.RawQuery = query.Encode()
+		uri.Path = "/search"
+	}
+
 	return &SearchSharedInput{
 		CSRFTokenInput:  csrf.TemplateField(r),
 		Query:           query,
@@ -86,7 +98,7 @@ func NewSearchSharedInput(s radio.SearchService, rs radio.RequestStorage, r *htt
 		RequestCooldown: cd,
 		Page: shared.NewPagination(
 			page, shared.PageCount(int64(searchResult.TotalHits), searchPageSize),
-			r.URL,
+			uri,
 		),
 	}, nil
 }