summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2019-12-18packages: remove onclick handlerrelease_2019-12-18Jelle van der Waa1-2/+2
The onclick handler is a CSP violator since no JavaScript is allowed to be executed without a nounce. The inline script has been replaced with a target="_blank". Closes: #202 Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
2019-12-18remove psycopg2 from production requirementsJelle van der Waa1-1/+0
Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
2019-12-18add packages rss feeds for "all stable repos" and "all testing repos"Michal Donat2-35/+150
https://bugs.archlinux.org/task/59329
2019-12-18Update django to 2.2.9Jelle van der Waa1-1/+1
2019-12-02Update django to 2.2.8release_2019-12-02Jelle van der Waa1-1/+1
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-11-17Update django to 2.2.7release_2019-11-17Jelle van der Waa1-1/+1
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-11-17templates: add provides exampleJelle van der Waa1-1/+1
2019-11-17Add support for searching by package providesJohannes Löthberg1-2/+10
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-11-07Fix a typo in commands/retire_user.pyFelix Yan1-1/+1
2019-11-07public: update SPI links to httpsJelle van der Waa1-2/+2
Sadly it seems the SPI does not redirect http to https or implement hsts so it's better to hardcode the links to https. Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-11-04rename funding to the correct filenameJelle van der Waa1-0/+0
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-11-04Add Github funding for Arch Linux.Jelle van der Waa1-0/+3
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-11-04Add Github actions statusJelle van der Waa1-0/+1
2019-11-04Add github actions workfowJelle van der Waa1-0/+29
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-10-26about: Remove superfluous commaRobin B1-1/+1
2019-10-25Merge pull request #252 from grazzolini/arch_announce_passwordrelease_2019-10-25jelle van der Waa2-6/+13
news: Add the MAILMAN_PASSWORD option and use it for sending authenticated emails
2019-10-25news: Make the check for MAILMAN_PASSWORD backwards compatibleGiancarlo Razzolini1-4/+4
This makes the check work with previous versions of archweb while also taking into account downstreams that might not want or need this change.
2019-10-25news: Change the news app to use the EmailMessage class to be able to ↵Giancarlo Razzolini2-7/+14
include the mailman password Due to spamming to arch-announce mail list, we now use a poster password to make sure only authorized emails are allowed through to the list.
2019-10-18Merge pull request #248 from shibumi/shibumi/edit-docker-infojelle van der Waa1-2/+2
Add information about official docker image
2019-10-16Add information about official docker imageChristian Rebischke1-2/+2
We have an official docker image now, let's mention that on our `Download` page. Signed-off-by: Christian Rebischke <chris@nullday.de>
2019-10-13js: split out package JavaScript to details.htmlJelle van der Waa2-70/+68
Move the only used JavaScript from the general archweb.js to it's page. Later this can be refactored to remove the jQuery dependency which is currently 1/3 of the request.
2019-10-13update jquery to 3.4.1Jelle van der Waa3-3/+3
2019-10-13packages: add note about multi-selection in stale relationsJelle van der Waa1-0/+1
2019-10-13Merge pull request #246 from jelly/reports_cleanupjelle van der Waa2-4/+2
Reports cleanup
2019-10-13devel: remove package description from reportsJelle van der Waa1-2/+0
The description doesn't add a lot of useful information to the report.
2019-10-13devel: truncate description of todolist overviewJelle van der Waa1-1/+1
Some todolists have an elaborate description which takes up a lot of space, limit these two 50 words.
2019-10-13devel: remove unrequired css classes from report viewJelle van der Waa1-1/+1
2019-10-04Merge pull request #242 from kyrias/invalidate-profile-updatejelle van der Waa1-0/+8
devel/views: Invalidate template fragment cache on profile update
2019-10-04devel/views: Invalidate template fragment cache on profile updateJohannes Löthberg1-0/+8
Closes #166. Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-10-01Merge pull request #241 from jelly/update_djangojelle van der Waa1-1/+1
Update django
2019-10-01Update djangoJelle van der Waa1-1/+1
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-09-21Merge pull request #240 from grazzolini/django_extensionsjelle van der Waa2-1/+4
Add django-extensions to the default installation
2019-09-19Add django-extensions to the default installationGiancarlo Razzolini2-1/+4
Django extensions comes with a lot of goodies, including shell_plus. As a default, included ptpython for default shell, but this can be overridden by installing another shell (bpython, ipython) and setting the SHELL_PLUS variable on local_settings.py.
2019-09-14templates: fix displaying maintainers in signoff statusJelle van der Waa1-2/+2
A group contains maintainers not a maintainer field, which can be multiple maintainers.
2019-09-11Updater requirements.txt filerelease_2019-09-11Jelle van der Waa1-3/+3
2019-09-11devel: Add sorting on groups to the admin viewJelle van der Waa1-2/+2
2019-09-11Merge pull request #234 from lrustand/approval-notificationjelle van der Waa2-0/+30
Send notification once package has enough signoffs
2019-09-10Send notification once packages has enough signoffsLars Rustand2-0/+30
2019-09-10Merge pull request #238 from 5long/local-devel-csrf-settingjelle van der Waa1-1/+2
Developing locally needs CSRF_COOKIE_SECURE=False
2019-09-09Developing locally needs CSRF_COOKIE_SECURE=FalseWhyme Lyu1-1/+2
2019-09-08devel: move signoff status up for more attentionJelle van der Waa1-47/+47
2019-09-05Update to django 2.2.5Jelle van der Waa1-1/+1
2019-08-13Merge pull request #236 from jelly/searchjelle van der Waa1-3/+3
packages: fix negative and invalid limit in search API
2019-08-13packages: fix negative and invalid limit in search APIJelle van der Waa1-3/+3
Resolve 500 issues when limit=wji or limit=-1 by setting a min_value of 0 and changing the field to a IntegerField.
2019-08-01Update django for security issuesrelease_2019-08-01Jelle van der Waa1-1/+1
2019-07-30Merge pull request #232 from jelly/traviscijelle van der Waa1-1/+1
Test on 3.7 and on Python nightly
2019-07-30Test on 3.7Jelle van der Waa1-1/+1
2019-07-28Handle null byte searchesJelle van der Waa1-0/+2
Some vulnerability scanners try to find security issues in all webforms and submit invalid null byte into the search from. This is cleaned out by django and leads to 'q' not being set which gives a 500 error. Check if the 'q' key exists in the cleaned_data if not return an empty list. Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
2019-07-15Bump Ipy version to 1.00Jelle van der Waa1-1/+1
Fixes a ValueError when setting an IPv6 address with a subnet. Signed-off-by: Jelle van der Waa <jelle@archlinux.org>
2019-07-06Re-add accidently removed class="Jelle van der Waa1-1/+1