bug: fix template use of structure with untrusted data Looks like an xSS bug with an early version of the template that was fixed in the code but never in the deployed tracker. It has been a while since this particular construct has been in the classic template which is the base for the tracker. This has been fixed on the deployed tracker as well. reported by 4bug of ChaMd5 Security Team H1 Group

# setuptools required for installation - missing from newer base images
setuptools
# human timezones
pytz
# indexer
Whoosh
# xapian is also installed
# extra database support
psycopg2
mysqlclient
redis
# encryption
gpg
# java web tokens
PyJWT
# extra HTTP compression methods
Brotli
zstd
# jinja2 template engine
Jinja2