Mercurial > p > roundup > code
view website/issues/extensions/timestamp.py @ 8063:6d4b5005abf2
docs: changes to website docs to announce CVE's
Changes to the website doc generation to create CVE.html by extracing
secions from upgrading.txt. It also allows overriding the release
version that is displayed in the web page titles.
It also adds support for making a zipfile (which is better supported
on windows that a tarball) of the templates needed to address the CVE
in the tracker home html files
The next commit for this directory will remove the generation of the
CVE.html file as CVE remediation/scope issue will be in the
upgrading.html document. It will also remove generation of
templates.zip.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Tue, 09 Jul 2024 09:12:29 -0400 |
| parents | 35ea9b1efc14 |
| children |
line wrap: on
line source
import time, struct, base64 from roundup.cgi.actions import RegisterAction from roundup.cgi.exceptions import * def timestamp(): return base64.encodestring(struct.pack("i", time.time())).strip() def unpack_timestamp(s): return struct.unpack("i",base64.decodestring(s))[0] class Timestamped: def check(self): try: created = unpack_timestamp(self.form['opaque'].value) except KeyError: raise FormError("somebody tampered with the form") if time.time() - created < 4: raise FormError("responding to the form too quickly") return True class TimestampedRegister(Timestamped, RegisterAction): def permission(self): self.check() RegisterAction.permission(self) def init(instance): instance.registerUtil('timestamp', timestamp) instance.registerAction('register', TimestampedRegister)
