Ticket search results

show domain on external links, if misleading

Dave Brondsema — Wed, 01 Apr 2026 15:14:14 -0000

When showing links (e.g originating from markdown, but really any html output) we should do something about links that could be misleading. For example with `sourceforge.net/auth/` we could automatically append `(evil.com)` into the output so its obvious when its misleading. We should also check for non-ascii domain names (IDN) and if they have chars that are potentially confusing with normal ascii, then show the decoded domain name (even if the link & text match, if the chars could be confusing)

Upgrade Underscore Library

Dillon Walls — Tue, 17 Mar 2026 20:59:10 -0000

Upgrade from 1.13.6 -> 1.13.8 to protect against known vulnerability https://github.com/jashkenas/underscore/issues/3011

improve bad markdown performance

Dave Brondsema — Mon, 23 Feb 2026 20:20:24 -0000

In some very specific cases the performance of markdown can be quite bad

Escape specific values in notification emails

Guillermo Cruz — Mon, 30 Mar 2026 19:21:50 -0000

We send out notification emails when a user performs an action, we should escape some of the values including in these emails like usernames.

Redact emails in logs

Guillermo Cruz — Fri, 20 Feb 2026 15:06:29 -0000

Redact email values that appear in logs.

Python Packages Upgrades

Guillermo Cruz — Tue, 10 Feb 2026 22:08:51 -0000

Like every quarter let's update the Python packages we use.

Markdown extension to improve html list parsing

Guillermo Cruz — Thu, 05 Feb 2026 18:32:32 -0000

Add new lib `mdx_breakless_lists` and run tests

prepend __task_ for special task params; use priority in reindex tasks

Dave Brondsema — Thu, 11 Dec 2025 18:21:12 -0000

`myfunc.post(..` and `post_event` take special params like `delay` but that would prevent the a normal `delay` parameter from being used. So we should make it `__task_delay`. Same for `flush_immediately`, and adding `priority` as an option now too. Then after that improvement, lets start using `__task_priority` in the reindex command, so they can run at a lower priority and not interfere with normal tasks.

Remove Skype field, update twitter

Daniel Castillo — Wed, 10 Dec 2025 16:01:44 -0000

Remove Skype from the /auth/user_info/contacts/ page and update Twitter to X

Support python 3.14

Dave Brondsema — Mon, 01 Dec 2025 15:56:07 -0000

After [#8588] we should be able to support python 3.14 I think

improve regexes and remove regex-as-re-globally pkg DROPS python 3.10

Dave Brondsema — Mon, 01 Dec 2025 17:36:58 -0000

`regex-as-re-globally` is a very hacky package (I made it, I'm ok to admit it) and it continuously has needs more fixes for every new version of python https://github.com/brondsem/regex-as-re-globally/issues?q=is%3Aissue So lets fix our regexes so we don't need it

Display Email Verification Message

Guillermo Cruz — Mon, 06 Oct 2025 17:15:11 -0000

When a user has unverified email addresses we should display a message asking to verify the email address

upgrade TurboGears to latest version

Guillermo Cruz — Mon, 06 Oct 2025 15:58:24 -0000

Latest version is 2.5.0

Add Python 3.13 Support

Dillon Walls — Wed, 03 Sep 2025 18:00:20 -0000

Markdown strip class and id attributes

Guillermo Cruz — Thu, 21 Aug 2025 20:50:28 -0000

Remove classes and ids that might get created from user input that we don't want for security reasons.

migrate from pkg_resources to importlib DROP PYTHON 3.9

Dillon Walls — Mon, 25 Aug 2025 15:00:34 -0000

According to `setup_tools`, [pkg_resources is deprecated and we should migrate to importlib.resources and importlib.metadata](https://setuptools.pypa.io/en/latest/pkg_resources.html). Migration Guides: - [Migration guide - importlib-resources 6.0.2.dev11+ge540919.d20230910 documentation](https://importlib-resources.readthedocs.io/en/latest/migration.html) - [Migration guide - importlib-metadata 6.8.1.dev12+gb98411e.d20230910 documentation](https://importlib-metadata.readthedocs.io/en/latest/migration.html)