Ticket search results

tweak show domain on external links

Dillon Walls — Fri, 01 May 2026 16:57:22 -0000

email auth verification by link

Dave Brondsema — Fri, 01 May 2026 18:21:37 -0000

With a link we can have a longer token for more security (still type-able if needed). And the link will defeat some MITM phishing attacks, forcing you to the right site. We can apply this to 2FA accounts too (currently being skipped) so they get the MITM protections too Downside is if you don't have email access on the same computer you're logging in to :(

Python Packages Upgrade

Daniel Castillo — Thu, 23 Apr 2026 18:36:42 -0000

Upgrade Python packages to the latest versions.

show domain on external links, if misleading

Dave Brondsema — Wed, 01 Apr 2026 15:14:14 -0000

When showing links (e.g originating from markdown, but really any html output) we should do something about links that could be misleading. For example with `sourceforge.net/auth/` we could automatically append `(evil.com)` into the output so its obvious when its misleading. We should also check for non-ascii domain names (IDN) and if they have chars that are potentially confusing with normal ascii, then show the decoded domain name (even if the link & text match, if the chars could be confusing)

Upgrade Underscore Library

Dillon Walls — Tue, 17 Mar 2026 20:59:10 -0000

Upgrade from 1.13.6 -> 1.13.8 to protect against known vulnerability https://github.com/jashkenas/underscore/issues/3011

improve bad markdown performance

Dave Brondsema — Mon, 23 Feb 2026 20:20:24 -0000

In some very specific cases the performance of markdown can be quite bad

Escape specific values in notification emails

Guillermo Cruz — Mon, 30 Mar 2026 19:21:50 -0000

We send out notification emails when a user performs an action, we should escape some of the values including in these emails like usernames.

Redact emails in logs

Guillermo Cruz — Fri, 20 Feb 2026 15:06:29 -0000

Redact email values that appear in logs.

Python Packages Upgrades

Guillermo Cruz — Tue, 10 Feb 2026 22:08:51 -0000

Like every quarter let's update the Python packages we use.

Markdown extension to improve html list parsing

Guillermo Cruz — Thu, 05 Feb 2026 18:32:32 -0000

Add new lib `mdx_breakless_lists` and run tests

prepend __task_ for special task params; use priority in reindex tasks

Dave Brondsema — Thu, 11 Dec 2025 18:21:12 -0000

`myfunc.post(..` and `post_event` take special params like `delay` but that would prevent the a normal `delay` parameter from being used. So we should make it `__task_delay`. Same for `flush_immediately`, and adding `priority` as an option now too. Then after that improvement, lets start using `__task_priority` in the reindex command, so they can run at a lower priority and not interfere with normal tasks.

Remove Skype field, update twitter

Daniel Castillo — Wed, 10 Dec 2025 16:01:44 -0000

Remove Skype from the /auth/user_info/contacts/ page and update Twitter to X

Support python 3.14

Dave Brondsema — Mon, 01 Dec 2025 15:56:07 -0000

After [#8588] we should be able to support python 3.14 I think

improve regexes and remove regex-as-re-globally pkg DROPS python 3.10

Dave Brondsema — Mon, 01 Dec 2025 17:36:58 -0000

`regex-as-re-globally` is a very hacky package (I made it, I'm ok to admit it) and it continuously has needs more fixes for every new version of python https://github.com/brondsem/regex-as-re-globally/issues?q=is%3Aissue So lets fix our regexes so we don't need it

Display Email Verification Message

Guillermo Cruz — Mon, 06 Oct 2025 17:15:11 -0000

When a user has unverified email addresses we should display a message asking to verify the email address

upgrade TurboGears to latest version

Guillermo Cruz — Mon, 06 Oct 2025 15:58:24 -0000

Latest version is 2.5.0

Add Python 3.13 Support

Dillon Walls — Wed, 03 Sep 2025 18:00:20 -0000

Markdown strip class and id attributes

Guillermo Cruz — Thu, 21 Aug 2025 20:50:28 -0000

Remove classes and ids that might get created from user input that we don't want for security reasons.

Upgrade Python Packages

Guillermo Cruz — Tue, 12 Aug 2025 17:44:02 -0000

Upgrade our Python packages to latest versions.

Update method for the installation of packages in editable mode

Guillermo Cruz — Tue, 12 Aug 2025 17:44:02 -0000

pip 25.3 will remove legacy `setup.py` develop mechanism for `pip install --editable` and we want to be ready for this release. Start updating our `setup.py` files and move the configuration to a `pyproject.toml` file.

Set Clear-Site-Data response header upon logout

Dillon Walls — Tue, 12 Aug 2025 17:44:02 -0000

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Clear-Site-Data Option to clear: session, cookies, and more

Upgrade Python Packages

Guillermo Cruz — Tue, 12 Aug 2025 17:44:02 -0000

Upgrade our Python packages

Allow notes on new projects section

Guillermo Cruz — Tue, 12 Aug 2025 17:44:01 -0000

Enable the ability to add notes per projects in the `new projects` admin section

upgrade JS libraries a bit

Dave Brondsema — Tue, 12 Aug 2025 17:44:01 -0000

To get compliant with https://retirejs.github.io/retire.js/ vulnerability scanning

Python package upgrades

Guillermo Cruz — Tue, 12 Aug 2025 17:44:01 -0000

Upgrade packages to their latest versions