zulip/zerver/views
Graham Bleaney 461d5b1a3e pysa: Introduce sanitizers, models, and inline marking safe.
This commit adds three `.pysa` model files: `false_positives.pysa`
for ruling out false positive flows with `Sanitize` annotations,
`req_lib.pysa` for educating pysa about Zulip's `REQ()` pattern for
extracting user input, and `redirects.pysa` for capturing the risk
of open redirects within Zulip code. Additionally, this commit
introduces `mark_sanitized`, an identity function which can be used
to selectively clear taint in cases where `Sanitize` models will not
work. This commit also puts `mark_sanitized` to work removing known
false postive flows.
2020-06-11 12:57:49 -07:00
..
development python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
__init__.py
alert_words.py alert words: Limit alert word length to 100. 2020-04-17 11:32:16 -07:00
archive.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
attachments.py
auth.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
camo.py camo: Clean up type ignores. 2019-08-09 16:39:16 -07:00
compatibility.py browser_support: Drop support for Internet Explorer. 2020-04-23 17:50:28 -07:00
custom_profile_fields.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
digest.py
documentation.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
email_mirror.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
events_register.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
home.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
hotspots.py
invite.py invitation: Make Member to see invitations sent by him/her. 2020-05-01 17:42:49 -07:00
messages.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
muting.py muting: Record DateTime when a Topic is muted. 2020-02-02 20:49:53 -08:00
pointer.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
portico.py docs: Update URLs to use https://zulip.com. 2020-06-08 18:10:45 -07:00
presence.py settings: Offer hiding presence info from other users. 2020-05-02 15:09:05 -07:00
push_notifications.py push_notifications: Declare token of type str, not bytes. 2019-11-12 23:21:20 -08:00
reactions.py api: Guess emoji_type when adding a reaction. 2020-04-28 20:49:39 -07:00
realm.py realm: Allow only organization owners to deactivate a realm. 2020-06-10 17:33:02 -07:00
realm_domains.py
realm_emoji.py openapi: Fix handling of parameters passed via the URL/path. 2019-08-19 15:06:08 -07:00
realm_export.py data exports: Handle pending and failed exports. 2020-04-30 13:00:59 -07:00
realm_filters.py
realm_icon.py redirects: Refactor redirect code to use central helper function. 2020-03-25 16:39:17 -07:00
realm_logo.py models: Create ensure_not_on_limited_plan instance method. 2020-05-19 14:48:59 -07:00
registration.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
report.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
storage.py
streams.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
submessage.py
thumbnail.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
tutorial.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
typing.py typing: Accept only user_ids in typing endpoint. 2020-06-10 17:50:32 -07:00
unsubscribe.py
upload.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
user_groups.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
user_settings.py settings: Offer hiding presence info from other users. 2020-05-02 15:09:05 -07:00
users.py api: Add GET /users/{user_id}/subscription/{stream_id} endpoint. 2020-06-10 17:59:14 -07:00
video_calls.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
zephyr.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00