Commit Graph

2627 Commits

Author SHA1 Message Date
Jelle van der Waa
d90042ed5f main: BigIntegerField fix Python style 2019-02-18 20:13:52 +01:00
jelle van der Waa
a82e874db9
Merge pull request #162 from jelly/jquery_upgrade
jQuery upgrade
2019-02-18 17:22:26 +01:00
Jelle van der Waa
b4552b9c15 flag: move inline css to a separate file
CSP dissalows inline CSS styles so move the CSS to a separate file.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
3daade6aea news: remove archweb.js include
archweb.js supplies no functions required in the news add/edit/delete
view.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
713519dc79 packages: remove inline style from flag out of date
Remove inline style and add new CSS rule for it.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
2a6d8b18bf templates: remove inline styles
Remove inline styles to hide itemprop's and use a global css class for
it.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
bf4e52e635 releng: remove inline css
Replace the usage of inline styles with a global css rule.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
0c27985c1c news: get rid of inline css styles
Remove the usage of an inline style for hiding #news-preview and hide it
in our global css. Also move the newspreview function to it's sole user
to reduce our global JS size.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
3525458926 Implement CSP for archweb
Add django-csp as dependency to be able to set CSP inside django's
settings and allow setting a CSP_NONCE for inline <script>'s in
templates. Since archweb heavily uses this pattern it's the best
compromise.
2019-02-18 16:42:51 +01:00
Jelle van der Waa
6b22bedd82 sitestatic: Update jQuery and tablesorter 2019-02-18 16:42:51 +01:00
Jelle van der Waa
37a51bc789 homepage: use self written typeahead implementation
Use a self written typeahead inmplemenation which gets rid of the
jQuery requirement. This saves upgrading issues and reduces the amount
of data to be loaded for the homepage by half.
2019-02-18 16:42:51 +01:00
jelle van der Waa
d1674c1d12
Merge pull request #186 from archlinux/switch-keyserver
Use sks-keyservers instead of mit
2019-02-18 16:40:41 +01:00
Jelle van der Waa
46c0bb4e17 Update to django 2.1.7 2019-02-14 20:51:04 +01:00
Jelle van der Waa
949d43b0e3
Bump django to latest version
2.1.6 security release.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
2019-02-11 15:04:22 +01:00
jelle van der Waa
1abcd3c817
Merge pull request #191 from jelly/test_fixes
Test fixes
2019-02-09 22:26:17 +01:00
Aleksandar Trifunovic
2f10c1cc15 Minor code cleanup, formatting, and simplification. 2019-02-09 22:21:21 +01:00
Aleksandar Trifunovic
b2f2c6aa5e add test 2019-02-09 22:12:39 +01:00
Jelle van der Waa
ac6be4410c packages: basic test for signoff pages 2019-02-09 21:09:35 +01:00
Jelle van der Waa
d41c57a09f packages: add tests for unflagging 2019-02-09 21:00:11 +01:00
Jelle van der Waa
1b80f06f6d news: fix xml sitemap
Fix Exception Value: 'list' object has no attribute 'filter', probably
introduced by running 2to3.
2019-02-09 19:12:57 +01:00
jelle van der Waa
18647d2295
Merge pull request #187 from archlinux/str-signature
Make Package.signature return str key_id
2019-02-09 16:20:05 +01:00
Jelle van der Waa
e58c11fd52 tests: add test for pgp_import keys
Add a test to check the pgp_import functionality with one key, by
patching call_pgp so there is no need of a local pacman keyring.
2019-02-09 16:13:14 +01:00
Felix Yan
24406b2764 Use .decode() instead of str() 2019-02-09 14:58:48 +01:00
Felix Yan
bdcfe16287 Fix also call_gpg's output 2019-02-09 14:58:48 +01:00
Felix Yan
a5d05569df Make Package.signature return str key_id
We use the attribute in many places, but it's a "bytes" object in
pgpdump that messes up the remaining logic. Let's just wrap it from the
very beginning.
2019-02-09 14:58:48 +01:00
Jelle van der Waa
4a2c87b0f6 Fix check on debug toolbar 2019-02-09 14:56:23 +01:00
Felix Yan
eef2b423eb
Use sks-keyservers instead of mit
The MIT keyserver is very unstable and slow during the past years. I would suggest to use a better alternative.
2019-02-09 01:01:28 +08:00
Jelle van der Waa
40d5fc5db4 settings: harden CRSF cookie's
Harden the CSRF cookie's by allowing them HTTP ONLY and marking them as
secure.

Closes: #173
2019-02-05 21:56:29 +01:00
Jelle van der Waa
daf554d29b public: add paypal donation link
Add a link to the SPI donation page which contains a PayPal donation
link.

Closes: #180
2019-02-05 21:15:08 +01:00
Jelle van der Waa
2e5be1e78f Add debug_toolbar support
Add support to use the Django debug toolbar with an easy setting in
local_settings.py.

Closes: #174
2019-02-05 21:03:43 +01:00
Jelle van der Waa
88739cd516 templates: add missing </a> to Unixstickers entry 2019-02-05 21:01:22 +01:00
jelle van der Waa
1ffdc3a61a
Merge pull request #163 from SantiagoTorres/remove_unsupported_from_about
templates/public/about: remove unsupported section
2019-02-05 10:59:17 +01:00
Jelle van der Waa
6b601e77c3 Update grammar for Docker download 2019-02-05 10:55:33 +01:00
jelle van der Waa
38aa1b29f8
Merge pull request #172 from rowanruseler/master
added docker section to /downloads
2019-02-05 10:52:40 +01:00
jelle van der Waa
6bb41c6f9c
Merge pull request #132 from akstrfn/python3
Some py3 fixes and some refactoring
2019-02-05 10:51:39 +01:00
Felix Yan
e8442cb788
Merge pull request #175 from archlinux/fix-typo
Fix a typo in donor_import.py
2019-02-04 04:37:01 +08:00
Aleksandar Trifunovic
203506c9cc
remove unecessary list calls 2019-02-01 21:27:57 +01:00
Aleksandar Trifunovic
adaa6d64c4
rewrite logic to put some key at the beginning of the OrderedDict 2019-02-01 21:27:57 +01:00
Aleksandar Trifunovic
cbf837ecf5
add mypy_cache to gitignore 2019-02-01 21:27:57 +01:00
Felix Yan
632dff662e
Fix a typo in donor_import.py 2019-01-30 03:01:50 +08:00
Jelle van der Waa
5895b2a221
Set two more security headers
Enable X-Content-Type-Options to prevent a browser from sniffing the
MIME type if the content type is not set. Enable cross site filter
protection supported by most browsers.
2019-01-28 21:28:24 +01:00
Jelle van der Waa
e8e80f357f
requirements: update markdown to the latest version 2019-01-28 21:12:27 +01:00
Jelle van der Waa
e5b5ed3409
requirements update parse dependency 2019-01-28 21:10:10 +01:00
Jelle van der Waa
da18435177
switch to python3's buildin mock
Instead of using a python module use the build-in mock and remove the
module from requirements.txt
2019-01-28 21:02:39 +01:00
Jelle van der Waa
54ecd257d0 requirements: remove unused MarkupSafe dependency
MarkupSafe was last used in 353f803, but obsolete since we now use
Django for making markup safe.
2019-01-28 20:38:30 +01:00
jelle van der Waa
8b19a9fbdf
Merge pull request #167 from jelly/python3
Switch to Django 2.x with Python 3.7
2019-01-28 20:31:27 +01:00
Rowan Ruseler
28fb123c21 added docker section to /downloads 2019-01-23 12:32:41 +01:00
Jelle van der Waa
923b674a8b mirrors: remove unused import 2019-01-21 21:20:19 +01:00
Jelle van der Waa
32fd54646f mirrors: tests: add exception test cases
Add test cases for 404 and 404 variant url exceptions.
2019-01-21 21:20:19 +01:00
Jelle van der Waa
632a5073d9 mirrors: types.StringTypes does not exists in Python 3 2019-01-21 21:20:19 +01:00