[error-report-web,0/2] Don't render submitted data as HTML

Message ID	20261018020518.76802-1-tim.orling@konsulko.com
Headers	show Return-Path: <ticotimo@gmail.com> ip: 209.85.216.54, mailfrom: ticotimo@gmail.com) From: Tim Orling <ticotimo@gmail.com> To: yocto-patches@lists.yoctoproject.org Cc: Tim Orling <tim.orling@konsulko.com> Subject: [error-report-web][PATCH 0/2] Don't render submitted data as HTML Date: Sat, 17 Oct 2026 19:03:52 -0700 Message-ID: <20261018020518.76802-1-tim.orling@konsulko.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Don't render submitted data as HTML \| expand [error-report-web,0/2] Don't render submitted data as HTML [error-report-web,1/2] Don't let Bootstrap insert submitted data as HTML. [error-report-web,2/2] Remove bleach and store submitted data as sent.

Message ID

20261018020518.76802-1-tim.orling@konsulko.com

Headers

From: Tim Orling <ticotimo@gmail.com>
To: yocto-patches@lists.yoctoproject.org
Cc: Tim Orling <tim.orling@konsulko.com>
Subject: [error-report-web][PATCH 0/2] Don't render submitted data as HTML
Date: Sat, 17 Oct 2026 19:03:52 -0700
Message-ID: <20261018020518.76802-1-tim.orling@konsulko.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

Don't render submitted data as HTML | expand

Message

Tim Orling Oct. 18, 2026, 2:03 a.m. UTC

Fix some security loopholes in the old Bootstrap implementation
and remove deprecated/unsupported bleach.

Tim Orling (2):
  Don't let Bootstrap insert submitted data as HTML.
  Remove bleach and store submitted data as sent.

 Post/parser.py               | 10 --------
 Post/static/js/main.js       | 14 ++++++++---
 Post/test.py                 | 45 ++++++++++++++++++++++++++++++++++++
 requirements.txt             |  1 -
 templates/latest-errors.html |  7 +-----
 5 files changed, 57 insertions(+), 20 deletions(-)


base-commit: 752b7188d04c2fd0e2f32f0cd2dd437c43058d82
prerequisite-patch-id: 9c9d012e1163dd1d335531d0451657823f17eb64
prerequisite-patch-id: ddb4df3e54736ed25846f91d4918299e601f4071
prerequisite-patch-id: ab69f4aa494291611cbe0e916f18b07f4aeebe57
prerequisite-patch-id: ac2b802ea065536df3854c48e265f5508d201cff
prerequisite-patch-id: 81a7de0e9568848efc8c66d397abb5f56218db95
prerequisite-patch-id: cf32dcaef20903890a020211a35f46b2384207da
prerequisite-patch-id: 6920bc5c70071bbd42b55b08bfc2bff04133c3ab
prerequisite-patch-id: a72bee4356db80ccb45321967d18081961f60860
prerequisite-patch-id: a2285b682329ba20d838085588b7c6681a86d273
prerequisite-patch-id: c3980e46d49b00b419cf4a7c2bc32c346478a453
prerequisite-patch-id: 627f58daa68852066f56558f08b07ad4af7bef9f
prerequisite-patch-id: 2d1b78495c909de035dbed74af06db5683701d1b
prerequisite-patch-id: 028165edb39ba03ad70f83ae9e2f36dff8c7e912
prerequisite-patch-id: f882f3967c3decfef434c86f2bb019b228275bac
prerequisite-patch-id: 6d9b0b9eba49c93ca0bcaf6cd25bc079efccb7cd
prerequisite-patch-id: 460c40f8c35ebd0f31d5d52f06c32cd7c1232fb7
prerequisite-patch-id: c7d6ab550cb907d3cc7e3a3b777695f45649c46f