catborise 32d7f279e7 test: inventory HTML sinks in templates, realistic datasource params in the matrix ... - instances/test_xss.py: scan all templates for .html(, innerHTML = and append('<...') and require each line to be in a reviewed allowlist, so new sinks fail the test (the exact-string tests only caught the lines they named). - Authorization matrix: fill the datasource "version" parameter with "latest" instead of "x". The datasource views then answer 200 to any logged-in user; they are listed in the allowlist as known F-14.		2026-10-03 00:00:27 +03:00
..
__init__.py	Initial commit	2015-02-27 10:53:51 +02:00
asgi.py	fix references to django 3 migration	2021-06-15 14:29:20 +03:00
common_tags.py	Rest framework (#24)	2022-08-22 15:12:33 +03:00
middleware.py	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
settings-dev.py	add white noise for static_root/staticfiles_dir problem for debug/non-debug running mode	2023-11-10 16:29:48 +03:00
settings.py.template	feat(accounts): force a password change at the first login with the generated password	2026-10-02 23:55:31 +03:00
test_authorization_matrix.py	test: inventory HTML sinks in templates, realistic datasource params in the matrix	2026-10-03 00:00:27 +03:00
urls-api.py	Rest framework (#24)	2022-08-22 15:12:33 +03:00
urls.py	feat(api): migrate API documentation from drf-yasg to drf-spectacular	2026-09-25 08:08:36 +03:00
wsgi.py	fix(wsgi): only install SIGCHLD handler from the main thread	2026-10-02 12:04:41 +03:00
wsgi_custom.py	fix references to django 3 migration	2021-06-15 14:29:20 +03:00