zulip/zerver
Anders Kaseorg afa218fa2a semgrep: Detect some unsafe uses of markupsafe.Markup.
Use the built-in HTML escaping of Markup("…{var}…").format(), in order
to allow Semgrep to detect mistakes like Markup("…{var}…".format())
and Markup(f"…{var}…").

Signed-off-by: Anders Kaseorg <anders@zulip.com>
2023-03-22 11:23:27 -07:00
..
actions invite: Be more fair about the no-messages-sent warning flag. 2023-03-20 11:35:19 -07:00
data_import upload: Rename upload_message_file to use word "attachment". 2023-03-02 16:36:19 -08:00
integration_fixtures/nagios
lib semgrep: Detect some unsafe uses of markupsafe.Markup. 2023-03-22 11:23:27 -07:00
management management: Add a command to send initial welcome bot messages. 2023-03-21 11:40:37 -07:00
migrations user_settings: Automate 'Include realm name in message email subject'. 2023-03-14 17:48:57 -07:00
openapi UserTopic: Set visibility_policy or delete UserTopic row without error. 2023-03-16 10:55:54 -07:00
tests portico: Add End Point Dev case study page. 2023-03-21 16:20:30 -07:00
tornado tornado: Replace dataclasses.asdict() call, as it is slow. 2023-02-23 11:01:38 -08:00
views semgrep: Detect some unsafe uses of markupsafe.Markup. 2023-03-22 11:23:27 -07:00
webhooks integration: Add branch names to Azure Devops merged PR event. 2023-03-20 12:33:47 -07:00
worker deferred_work: Log at start of the work. 2023-02-09 12:06:38 -08:00
__init__.py
apps.py sentry: Initialize sentry in AppConfig ready hook. 2022-09-26 12:42:36 -07:00
context_processors.py sentry: Enable reporting on portico and other unauth pages. 2023-03-07 15:01:27 -08:00
decorator.py request-notes: Add `is_webhook_view` boolean to fields. 2023-03-06 10:33:13 -08:00
filters.py
forms.py semgrep: Detect some unsafe uses of markupsafe.Markup. 2023-03-22 11:23:27 -07:00
logging_handlers.py python: Use Python 3.8 typing.{Protocol,TypedDict}. 2022-04-27 12:57:49 -07:00
middleware.py ruff: Fix PIE810 Call `startswith` once with a `tuple`. 2023-02-08 16:40:35 -08:00
models.py user_topics: Introduce visibility policy enum subclass in models.py. 2023-03-14 17:50:45 -07:00
signals.py requirements: Upgrade to Django 4.0. 2022-07-13 16:07:17 -07:00