Ticket search results

Upgrade packages

Dave Brondsema — Tue, 04 Aug 2026 15:17:57 -0000

Implement field level encryption for email address in user preferences

Carlos Cruz — Fri, 24 Jul 2026 20:45:15 -0000

Documentation and migration for encrypted fields

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

With all the new field-level encryption lately, we need to update our docs, configs, and migrations

Implement field level encryption for User's email addresses list

Carlos Cruz — Tue, 07 Jul 2026 18:46:05 -0000

Authentication code tweaks

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

If geo information is available make it available for the html template.

Pin pre-commit dependencies

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Implement field level encryption for the email field from the EmailAddress model

Carlos Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Implement field level encryption for the email field in the EmailAddress model

Remove locale en_US.UTF-8 dependency

Dillon Walls — Mon, 29 Jun 2026 17:19:08 -0000

More modern versions of python handle UTF-8 encoding perfectly with the default univervisal `C.UTF-8` encoding. The hard-coded `en_US.UTF-8` that's used by svn.py isn't necessary anymore.

Implement field level encryption for the User's display name

Carlos Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Implement field level encryption for the User's display name and update related tests

tweak show domain on external links

Dillon Walls — Mon, 29 Jun 2026 17:19:08 -0000

email auth verification by link

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

With a link we can have a longer token for more security (still type-able if needed). And the link will defeat some MITM phishing attacks, forcing you to the right site. We can apply this to 2FA accounts too (currently being skipped) so they get the MITM protections too Downside is if you don't have email access on the same computer you're logging in to :(

Python Packages Upgrade

Daniel Castillo — Mon, 29 Jun 2026 17:19:08 -0000

Upgrade Python packages to the latest versions.

show domain on external links, if misleading

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

When showing links (e.g originating from markdown, but really any html output) we should do something about links that could be misleading. For example with `sourceforge.net/auth/` we could automatically append `(evil.com)` into the output so its obvious when its misleading. We should also check for non-ascii domain names (IDN) and if they have chars that are potentially confusing with normal ascii, then show the decoded domain name (even if the link & text match, if the chars could be confusing)

Upgrade Underscore Library

Dillon Walls — Mon, 29 Jun 2026 17:19:08 -0000

Upgrade from 1.13.6 -> 1.13.8 to protect against known vulnerability https://github.com/jashkenas/underscore/issues/3011

improve bad markdown performance

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

In some very specific cases the performance of markdown can be quite bad

Escape specific values in notification emails

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

We send out notification emails when a user performs an action, we should escape some of the values including in these emails like usernames.

Redact emails in logs

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Redact email values that appear in logs.

Python Packages Upgrades

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Like every quarter let's update the Python packages we use.

Markdown extension to improve html list parsing

Guillermo Cruz — Mon, 29 Jun 2026 17:19:08 -0000

Add new lib `mdx_breakless_lists` and run tests

prepend __task_ for special task params; use priority in reindex tasks

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

`myfunc.post(..` and `post_event` take special params like `delay` but that would prevent the a normal `delay` parameter from being used. So we should make it `__task_delay`. Same for `flush_immediately`, and adding `priority` as an option now too. Then after that improvement, lets start using `__task_priority` in the reindex command, so they can run at a lower priority and not interfere with normal tasks.

Remove Skype field, update twitter

Daniel Castillo — Mon, 29 Jun 2026 17:19:08 -0000

Remove Skype from the /auth/user_info/contacts/ page and update Twitter to X

Support python 3.14

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

After [#8588] we should be able to support python 3.14 I think

improve regexes and remove regex-as-re-globally pkg DROPS python 3.10

Dave Brondsema — Mon, 29 Jun 2026 17:19:08 -0000

`regex-as-re-globally` is a very hacky package (I made it, I'm ok to admit it) and it continuously has needs more fixes for every new version of python https://github.com/brondsem/regex-as-re-globally/issues?q=is%3Aissue So lets fix our regexes so we don't need it