Commit Graph

1863 Commits

Author SHA1 Message Date
rubenwardy
29a6a762cb Remove CSRF token expiry
According to the OWASP, CSRF tokens don't need expiry times. They should be bound to the session.

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#employing-hmac-csrf-tokens

Fixes #437
2024-06-22 13:30:18 +01:00
rubenwardy
63ad6a2b9a Normalize long description line endings when set by API 2024-06-22 13:26:04 +01:00
rubenwardy
da090fd3f5 Normalize line endings in form submissions
Fixes #506
2024-06-22 13:22:37 +01:00
rubenwardy
d6e25f38a8 Fix Git integration test 2024-06-22 13:11:17 +01:00
rubenwardy
86ca3864a3 Fix EasyMDE and Bootstrap conflict 2024-06-22 13:08:26 +01:00
rubenwardy
6b5230b0c1 Update easymde to 2.18 2024-06-22 13:02:27 +01:00
rubenwardy
80888f0675 Fix tokens being deleted when package set to None 2024-06-22 12:57:08 +01:00
rubenwardy
b3c5824490 Make "Convert to Thread" for moderator reviews more obvious
Fixes #403
2024-06-22 12:44:43 +01:00
rubenwardy
7a94b9361f Allow filtering VCS webhooks based on branch name
Fixes #258
2024-06-22 12:13:49 +01:00
rubenwardy
09e06a159a Fix VCS webhooks assuming repo URLs are unique
Fixes #264
2024-06-22 12:01:09 +01:00
rubenwardy
ca961cb35f Fix various issues with forum topic importing
Fixes #201
2024-06-22 11:11:57 +01:00
rubenwardy
12545c69ac Add mismatched topics editor page 2024-06-22 10:45:14 +01:00
rubenwardy
aeca6cbbdb QueryBuilder: Update noindex 2024-06-11 21:45:17 +01:00
rubenwardy
211b130f98 Advanced Search: Use dropdown for supported game 2024-06-11 21:39:10 +01:00
rubenwardy
2c8b751f98 Advanced Search: Fix values, remove use of __None 2024-06-11 21:35:20 +01:00
rubenwardy
e75f2f92e2 Add advanced search interface
Fixes #112
2024-06-11 21:25:58 +01:00
rubenwardy
d5492cbb9b QueryBuilder: Allow hiding tags 2024-06-11 19:37:05 +01:00
rubenwardy
1a74471b68 QueryBuilder: Fix crash due to set changing size 2024-06-09 16:56:01 +01:00
rubenwardy
042e811a40 Fix tags sort by layout error 2024-06-09 16:53:09 +01:00
rubenwardy
7219c8b4a9 Remove link to deleted tags help page
Fixes #543
2024-06-09 16:50:49 +01:00
rubenwardy
8b6bd8d282 Add gettext context to tags and warnings, update translations 2024-06-09 13:48:00 +01:00
rubenwardy
36644216b2 Fix some typos 2024-06-09 13:31:44 +01:00
rubenwardy
195008c69e Update translations 2024-06-09 13:28:45 +01:00
rubenwardy
80499dbf6c Fix remaining instances of package type as a gettext parameter
Fixes #355
2024-06-09 13:26:16 +01:00
rubenwardy
2869876b67 Fix Gettext metadata shown on empty tag description
Fixes #541
2024-06-09 13:22:07 +01:00
rubenwardy
5eb202941a Fix crash on users list page 2024-06-09 11:53:52 +01:00
rubenwardy
663fb38d9f Show review language on reviews 2024-06-09 11:50:21 +01:00
rubenwardy
b6e7e09171 Update translations 2024-06-09 11:40:25 +01:00
rubenwardy
e335797629 Fix UserRank not being translatable 2024-06-08 12:27:05 +01:00
rubenwardy
7cf1f40ff6 Fix tags on spotlight carousel being untranslated 2024-06-08 12:16:52 +01:00
rubenwardy
a99a8a4df3 Update translations 2024-06-08 11:16:38 +01:00
rubenwardy
3c096aac41 Add language to reviews 2024-06-08 11:12:42 +01:00
rubenwardy
f0039774e4 Fix remaining known untranslatable text
Fixes #351
2024-06-08 10:54:50 +01:00
rubenwardy
eb9466f346 Add separate translations for each content type
Fixes #355
Fixes #538
2024-06-08 10:46:47 +01:00
rubenwardy
a356a50abb Add mention of obfuscation to package policy 2024-06-07 23:05:24 +01:00
rubenwardy
598c02eeff Prompt users to set maintenance state rather than removing 2024-06-07 22:57:55 +01:00
rubenwardy
1c85e12f9e Add video_thumbnail_url to API 2024-06-07 06:32:22 +01:00
rubenwardy
5bd97598a8 Add YouTube thumbnail support
Fixes #359
2024-06-07 06:25:32 +01:00
rubenwardy
ee83a7b5ce Fix screenshots being distorted on collection pages
Fixes #497
2024-06-07 05:46:35 +01:00
rubenwardy
c731ab027a Update translations 2024-06-07 05:30:19 +01:00
rubenwardy
d2c5779301 Add ability to translate tags and content warnings 2024-06-07 05:28:57 +01:00
rubenwardy
7d00a5b969 Add list of possible licenses to error response 2024-06-05 19:45:37 +01:00
rubenwardy
804e131cb8 Fix case insensitive license search in querybuilder.py 2024-06-05 19:31:48 +01:00
rubenwardy
6a53f25665 Add prompt to read ContentDB's rules to review page 2024-06-05 19:28:16 +01:00
rubenwardy
380f009529 Add option to filter packages by license 2024-06-05 19:27:09 +01:00
rubenwardy
57ed2fc416 modtools: Redirect to tasks.check when changing GitHub username 2024-06-04 20:37:43 +01:00
rubenwardy
3b56ef7148 Add ability to filter audit log 2024-06-04 20:32:29 +01:00
rubenwardy
2653071886 Fix GitHub link not saved on GitHub-based registration 2024-06-04 20:29:46 +01:00
rubenwardy
5e122279ec Clean up user registration code 2024-06-02 21:24:21 +01:00
rubenwardy
4872ea9e6a Make GITHUB_API_TOKEN actually optional 2024-06-02 17:38:32 +01:00
rubenwardy
bb39f268d3 Fix potential issue with existing user query matching multiple users 2024-06-02 12:48:06 +01:00
rubenwardy
bce06d45d0 Allow signing up using GitHub 2024-06-02 12:46:56 +01:00
rubenwardy
54c50a815d Limit reason field length 2024-06-02 12:33:40 +01:00
rubenwardy
6b04324ee5 Limit text length sent to discord webhook 2024-06-02 12:29:49 +01:00
rubenwardy
8db31ebfa9 Add recalc package scores admin action 2024-06-02 12:26:22 +01:00
rubenwardy
1eaa5d8767 Add call-to-action to report outdated reviews 2024-06-02 12:25:54 +01:00
rubenwardy
522f12356a Add "Ask a question" button to create a thread 2024-06-02 12:20:07 +01:00
rubenwardy
e344e28166 Fix missing uncommited import 2024-06-02 12:10:55 +01:00
rubenwardy
2d29fb1994 Remove package deletion to worker 2024-06-02 11:40:33 +01:00
rubenwardy
e1e77033fe Fix deleting soft-removed packages 2024-06-01 15:36:30 +01:00
rubenwardy
1fad818f05 Add review count to scores API 2024-06-01 00:06:25 +01:00
rubenwardy
37bff46f33 Add remove profile picture button 2024-05-26 15:21:57 +01:00
rubenwardy
8815327257 Add user_agent is_bot tests 2024-05-24 16:24:38 +01:00
rubenwardy
a3371d538c Fix two form and validation issues 2024-05-24 16:24:38 +01:00
rubenwardy
b5cd169af8 Update database dependencies 2024-05-24 16:24:38 +01:00
rubenwardy
37b50bf409 Update Flask dependencies 2024-05-24 16:24:38 +01:00
rubenwardy
04b87a4e74 Add approval stats page 2024-05-17 18:52:55 +01:00
rubenwardy
b2e543a16a Reduce Sentry sample rate 2024-05-16 17:08:57 +01:00
rubenwardy
8e719e3503 Fix broken links in reviews hypertext 2024-05-02 20:40:54 +01:00
rubenwardy
4ac0016c0b Add endpoint for getting hypertext of reviews 2024-05-02 20:32:49 +01:00
rubenwardy
faddf11f77 Fix TaskErrors being reported to Sentry 2024-05-01 21:29:36 +01:00
rubenwardy
662c632f5d Fix typos in privacy policy 2024-04-30 23:17:12 +01:00
rubenwardy
3d9fe80177 Add disconnect GitHub button 2024-04-30 23:16:14 +01:00
rubenwardy
a2125acddd Add privacy policy updated note to footer 2024-04-29 23:17:14 +01:00
rubenwardy
4bed2fc40c Add Sentry to about and privacy policy 2024-04-29 23:07:36 +01:00
rubenwardy
31b8ef5d87 Update privacy policy (#445) 2024-04-29 23:04:24 +01:00
rubenwardy
7d18cdee95 Use Sentry instead of emailing errors 2024-04-28 12:35:16 +01:00
rubenwardy
3a794fecbf Add contact and donate links to the footer 2024-04-14 15:51:35 +01:00
rubenwardy
686d285731 Fix hypertext escaping of game links 2024-04-07 23:17:58 +01:00
rubenwardy
f77ecd824c Add username to already linked error message
This doesn't introduce user enumeration as GitHub
username associations were already public
2024-04-07 23:17:34 +01:00
rubenwardy
465370d3fc Add featured field to packages API
Fixes #500
2024-04-05 18:25:41 +01:00
rubenwardy
609354cd35 Hypertext: Fix various issues
* Change link color
* Return absolute URLs
* Provide link to tables (with anchor)
* Provide link to image when include_images=false
* Escape backward slashes
* Make package info more compact
2024-04-05 18:17:07 +01:00
rubenwardy
6280cd5947
Remove some forum topic related features (#527) 2024-04-03 18:30:08 +01:00
rubenwardy
bb81e1387a Update repo/forum link alert message 2024-04-03 18:24:41 +01:00
rubenwardy
1b8c13914c Add admin action to warn about git/repo links instead of internal links 2024-04-03 00:37:21 +01:00
rubenwardy
3ee4b723c1 for-client API: Add links to supported games 2024-04-03 00:27:58 +01:00
rubenwardy
47b2d07e89 for-client API: Make screenshots a list of objects not URLs 2024-04-01 17:43:16 +01:00
rubenwardy
1be4155ab0 Add Minetest-optimised package endpoint 2024-04-01 17:32:12 +01:00
rubenwardy
0f5a97b539 Improve repo and forum topic matching in hints 2024-03-31 15:59:30 +01:00
rubenwardy
66f855cc61 Improve package edit hints 2024-03-31 15:38:46 +01:00
rubenwardy
8c59520317 Make package edit help links open in a new tab 2024-03-31 04:04:00 +01:00
rubenwardy
eaea6ce9a3 Add help page for making better package pages 2024-03-31 04:00:18 +01:00
rubenwardy
f0a33927bd Fix collections API showing unapproved packages
Fixes #504
2024-03-30 17:46:54 +00:00
rubenwardy
e82dac4403 Fix collections showing unapproved packages
Fixes #504
2024-03-30 17:41:47 +00:00
rubenwardy
c782e59531 Add link to collections search to package page 2024-03-30 17:37:43 +00:00
rubenwardy
e9193aefb8 Add favorites count to favorite button 2024-03-30 17:27:08 +00:00
rubenwardy
64414a3731 Check that GitHub doesn't pass a null user id 2024-03-30 17:06:32 +00:00
rubenwardy
f5dd77fcb3 Use GitHub user ids instead of usernames for authentication
Otherwise, renaming a GitHub account could allow someone else
to gain access to a CDB account.
2024-03-30 17:00:01 +00:00
rubenwardy
a8d2cc0383 Add dependency-based cache to game support algorithm 2024-03-29 16:02:32 +00:00
rubenwardy
b33a7f79b1 Fix game support not updating when removing a provided mod 2024-03-29 15:54:52 +00:00