FAQ | This is a LIVE service | Changelog

Skip to content
Snippets Groups Projects
  1. Mar 07, 2019
    • Dr Rich Wareham's avatar
      add GitLab CI configuration for testing · 1352e5c6
      Dr Rich Wareham authored
      Add a basic CI configuration which matrix tests against supported
      Python and Django versions along with running flake8 and code-coverage.
      Coverage information is extracted from the coverage job run.
      
      Closes #6
      1352e5c6
  2. Jan 07, 2019
    • Rich Wareham's avatar
      Merge pull request #4 from uisautomation/tox · 9d62ab15
      Rich Wareham authored
      Add tox support for matrix testing
    • Dr Rich Wareham's avatar
      docker-compose.yml: rework tox · c595ec56
      Dr Rich Wareham authored and Dr Abraham Martin's avatar Dr Abraham Martin committed
      Re-work the tox deployment so that we mount the application directory as
      a read-only volume rather than copying the file in when building the
      image. This has the following advantages:
      
      1. We do not build a new image each time we run tests. (This is nicer to
         those of us with finite disk space.)
      2. Running tests is slightly faster since a new image is not being
         built.
      3. The application directory is mounted read-only so we catch code which
         accidentally writes to the current directory.
      4. We can use the upstream tox image rather than rolling our own derived
         image.
      
      In order to make to happy to run in a read-only environment, we specify
      that a) it does not run sdist to write an .egg-info directory and b)
      that coverage data is stored in /tmp rather than the application
      directory.
      c595ec56
  3. Dec 20, 2018
  4. Dec 19, 2018
  5. Jul 13, 2018
  6. Jan 23, 2018
  7. Apr 20, 2017
  8. Mar 22, 2017
  9. Jan 18, 2017
  10. Jan 13, 2017
  11. Sep 16, 2016
  12. Sep 15, 2016
  13. Sep 14, 2016
    • Jon Warbrick's avatar
      Fix lack of escaping (and so XSS vuln.) in select2 calls · 5e25e476
      Jon Warbrick authored
      The invocation of Jquery select2 to provide searchable dropdowns
      didn't sanitise data coming fom lookup, with the result that any
      HTML markup it contained, including <script>...</script>, was
      interpreted.
      
      The documentation is difficult to follow, but indications are that the
      formater functions (at least formatResult and formatSelection), if
      overriden have to do their own escaping of data as necessary. They are
      however passed the current global 'escapeMarkup' function as their
      final parameter.
      5e25e476
  14. Aug 23, 2016
  15. Jun 13, 2016
  16. Jun 06, 2016
  17. May 11, 2016
  18. Oct 12, 2015
Loading