| Mon, 06 Apr 2026 01:27:39 -0400 |
John Rouillard |
bug(perf): move import tempfile to top of file
|
| Sun, 05 Apr 2026 17:49:21 -0400 |
John Rouillard |
bug: remove exec that re-raises exception for python 2 (hexora)
|
| Thu, 25 Dec 2025 14:04:09 -0500 |
John Rouillard |
set self.language attribute when translator passed into Client()
|
| Thu, 25 Dec 2025 12:14:53 -0500 |
John Rouillard |
bug: fix mis-commit of perf tests and crash fix for setTranslation
|
| Tue, 23 Dec 2025 22:11:23 -0500 |
John Rouillard |
bug: rearrange test condition to optimize test w/ most likely to fail first and expensive permission check last
|
| Mon, 22 Dec 2025 01:14:14 -0500 |
John Rouillard |
chore: ruff whitespace fixes.
|
| Sun, 21 Dec 2025 23:59:08 -0500 |
John Rouillard |
bug: don't reference vendored outside of anypy modules
|
| Tue, 16 Sep 2025 22:53:00 -0400 |
John Rouillard |
feature: add thread local trace_id and trace_reason to logging.
|
| Wed, 13 Aug 2025 23:52:49 -0400 |
John Rouillard |
feat: finish reauth docs, enhance code.
reauth-confirm_id
|
| Mon, 11 Aug 2025 14:01:12 -0400 |
John Rouillard |
feat(security): Add user confirmation/reauth for sensitive changes
reauth-confirm_id
|
| Sun, 10 Aug 2025 21:27:06 -0400 |
John Rouillard |
refactor: move RateLimitExceeded to roundup.cgi.exceptions
|
| Sat, 12 Jul 2025 17:53:17 -0400 |
John Rouillard |
doc: formatting fix. Don't trigger description list.
|
| Mon, 02 Jun 2025 08:52:39 -0400 |
John Rouillard |
fix(web): issue2551406 - dont crash when handed invalid @template=a|b|c
|
| Mon, 13 Jan 2025 12:48:31 -0500 |
John Rouillard |
refactor: translator hint that 'user%s' should not be 'user %s'
|
| Sun, 12 Jan 2025 12:34:52 -0500 |
John Rouillard |
fix: issue2551387 - TypeError: not indexable.
|
| Thu, 09 Jan 2025 10:14:55 -0500 |
John Rouillard |
doc: remove uneeded comment. CORS preflight code path moved.
|
| Thu, 09 Jan 2025 09:30:08 -0500 |
John Rouillard |
fix(api): issue2551384. Verify REST authorization earlier
|
| Sun, 05 Jan 2025 00:59:12 -0500 |
John Rouillard |
fix: cae1bbf2536b - expression errors not setting result properly
|
| Wed, 01 Jan 2025 02:06:00 -0500 |
John Rouillard |
fix: issue2551374 - Add error handling for filter expressions. Fix UI
|
| Tue, 31 Dec 2024 17:11:17 -0500 |
John Rouillard |
feat: issue2551372 - REST-API CSRF protection should document mandatory Origin header
|
| Mon, 30 Dec 2024 20:22:55 -0500 |
John Rouillard |
fix: issue2551374. Error handling for filter expressions.
|
| Sun, 29 Dec 2024 19:11:01 -0500 |
John Rouillard |
issue2551116 - Replace xmlrpclib (xmlrpc.client) with defusedxml.
|
| Wed, 11 Dec 2024 16:24:16 -0500 |
John Rouillard |
chore(ruff): use names not magic numbers.
|
| Wed, 11 Dec 2024 15:22:03 -0500 |
John Rouillard |
chore(ruff): clean whitespace and remove unrecognized noqa directive.
|
| Wed, 11 Dec 2024 15:09:44 -0500 |
John Rouillard |
chore(ruff): changes to else/elif and nested ifs to reduce nesting
|
| Wed, 11 Dec 2024 14:29:19 -0500 |
John Rouillard |
chore(ruff): clean trailing whitespace
|
| Wed, 11 Dec 2024 14:17:01 -0500 |
John Rouillard |
chore(ruff): remove unreachable line
|
| Wed, 11 Dec 2024 13:29:11 -0500 |
John Rouillard |
chore(ruff): return/suppress boolen directly
|
| Wed, 11 Dec 2024 13:13:55 -0500 |
John Rouillard |
chore(ruff): whatespace fixes/silence linting
|
| Wed, 11 Dec 2024 11:36:16 -0500 |
John Rouillard |
chore(ruff): new name for input variable which doesn't shadow builtin
|
| Tue, 10 Dec 2024 17:38:57 -0500 |
John Rouillard |
fix(web): issue2551356. Add etag header ... fix env variable name
|
| Tue, 10 Dec 2024 16:06:13 -0500 |
John Rouillard |
fix(web): issue2551356. Add etag header for not-modified (304) request.
|
| Wed, 04 Dec 2024 10:45:26 +0100 |
Ralf Schlatterbeck |
Documentation and fix for REST headers
|
| Tue, 26 Nov 2024 17:11:13 -0500 |
John Rouillard |
issue2551370 - prefix session cookie with __Secure- over https
|
| Sun, 21 Jul 2024 10:56:44 -0400 |
John Rouillard |
chore(lint): format imports and add/remove blank lines.
|
| Tue, 09 Jul 2024 09:07:09 -0400 |
John Rouillard |
fix(security): fix CVE-2024-39124, CVE-2024-39124, and CVE-2024-39125
|
| Mon, 17 Jun 2024 23:35:03 -0400 |
John Rouillard |
refactor: make mime_type_allowlist class prop to configure from interfaces.py
|
| Sun, 02 Jun 2024 22:15:10 -0400 |
John Rouillard |
fix: Send vary header for if-modified-since conditional returning 304
|
| Sun, 02 Jun 2024 20:35:47 -0400 |
John Rouillard |
fix: make If-None-Match work for static file (@@file) case
|
| Sun, 02 Jun 2024 18:22:53 -0400 |
John Rouillard |
fix: Send Vary: Accept-Encoding on any data that could be compressed
|
| Sat, 01 Jun 2024 03:52:02 -0400 |
John Rouillard |
Fix incorrect timezone of -0000. Use GMT instead. Error found using redbot
|
| Sat, 27 Apr 2024 21:03:20 -0400 |
John Rouillard |
fix use of '-' directory in static files
|
| Sun, 17 Mar 2024 00:51:12 -0400 |
John Rouillard |
chore(refactor): extract setting of db.tx_source out of if tree
|
| Sat, 16 Mar 2024 22:57:19 -0400 |
John Rouillard |
chore(refactor): use with open, consolidate/un-nest if ...
|
| Sat, 16 Mar 2024 21:31:26 -0400 |
John Rouillard |
chore(ruff): sort imports; tuples for import not supported in python2.
|
| Thu, 14 Mar 2024 19:04:19 -0400 |
John Rouillard |
feat: add support for rotating jwt keys
|
| Wed, 13 Mar 2024 17:53:05 -0400 |
John Rouillard |
fix: if Content-Type header defined, don't overwrite with default
|
| Sun, 03 Sep 2023 14:03:11 -0400 |
John Rouillard |
refactor: rename the mime type whitelist
|
| Mon, 24 Jul 2023 17:49:58 -0400 |
John Rouillard |
fix: issue2551193 - Fix roundup for removal of cgi and cgitb ...
|
| Sun, 23 Jul 2023 23:25:37 -0400 |
John Rouillard |
flake8: add space between return, del and (
|
| Wed, 19 Jul 2023 20:37:45 -0400 |
John Rouillard |
fix(api): - issue2551063 - Rest/Xmlrpc interfaces needs failed login protection.
|
| Thu, 08 Jun 2023 20:38:29 -0400 |
John Rouillard |
Fix mispellings in comments.
|
| Tue, 18 Apr 2023 16:28:24 -0400 |
John Rouillard |
remove obsolete comment
|
| Sat, 18 Mar 2023 14:16:31 -0400 |
John Rouillard |
flake8 fixes: whitespace, remove unused imports
|
| Thu, 23 Feb 2023 16:20:32 -0500 |
John Rouillard |
- issue2551257: add 'X-Content-Type-Options: nosniff' header for file download
|
| Thu, 23 Feb 2023 12:01:33 -0500 |
John Rouillard |
improve REST interface security
|
| Tue, 21 Feb 2023 22:35:58 -0500 |
John Rouillard |
Refactor rejecting requests; update tests, xfail test
|
| Tue, 21 Feb 2023 16:42:20 -0500 |
John Rouillard |
better rest Origin check; refactor CORS preflight code.
|
| Sun, 11 Dec 2022 18:54:21 -0500 |
John Rouillard |
bug: handle exception when origin header is missing
|
| Tue, 06 Dec 2022 15:07:18 -0500 |
John Rouillard |
pylint: fix first reference to properties outside of __init__
|