catborise d816d8d09f fix(appsettings): the theme must be one of the themes in SASS_DIR ... The settings page took the posted theme name as it came and wrote it into the @import lines of wvc-main.scss and the compiled CSS: a name with "../" or a quote imported files outside the themes directory (CodeQL py/path-injection; the page is for superusers). The name must now be one of the directories in SASS_DIR/wvc-themes, the list the page already offers; anything else is refused with a message and nothing is written. themes_list is empty when SASS_DIR has no themes, so every name is refused then. Checked with the real dev/scss: flatly is applied and compiled as before, "../../etc" is refused and leaves the CSS alone. The test fails on the previous code.		2026-10-06 08:02:05 +03:00
..
migrations	feat(console): VNC is the only console type	2026-10-04 01:08:11 +03:00
templates	Bootstrap5 (#17)	2021-07-07 14:12:38 +03:00
__init__.py	Add Settings page: Move theme & lang changer to settings page	2020-06-04 12:03:26 +03:00
apps.py	fix: track migrations; installs apply them instead of generating them	2026-10-04 01:08:11 +03:00
context_processors.py	Some improvements for appsettings app	2020-06-17 15:15:58 +06:00
middleware.py	ci: replace super-linter with ruff	2026-10-04 01:08:11 +03:00
models.py	format python code with black	2022-11-02 08:54:35 +03:00
settings.py	Accounts app improvements and tests	2020-10-14 14:25:05 +03:00
test_appsettings.py	ci: replace super-linter with ruff	2026-10-04 01:08:11 +03:00
test_theme_name.py	fix(appsettings): the theme must be one of the themes in SASS_DIR	2026-10-06 08:02:05 +03:00
tests.py	ci: replace super-linter with ruff	2026-10-04 01:08:11 +03:00
views.py	fix(appsettings): the theme must be one of the themes in SASS_DIR	2026-10-06 08:02:05 +03:00