9 Commits

Include renames

Author	SHA1	Message	Date
dgtlmoonandClaude Opus 5.5	352b036217	API - Reject broken Jinja2 templates in url, link_to_open, body and headers (shared with the edit form) (#4587) ... * API - Reject broken Jinja2 in url, link_to_open, body and headers, shared validation with the edit form The edit form validated Jinja2 templates on save but the API did not, so a broken body or header template saved through the API only failed at fetch time, on every check. - New jinja2_custom/validate.py: validate_jinja2_fields() renders each value that matches JINJA2_MARKER_PATTERN and returns {field: translated error} - The edit form uses it instead of four copies of the same try/except - API create and update return 400 naming the field Translations: messages moved to the new file (msgids unchanged); also translated the header error for fr/it and fixed the cs/es wording. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * rebuild --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 18:15:52 +02:00
4 people	f20c82fb15	Fix Jinja2 false-positive when URL contains {% (#4208) ... * Add tests for Jinja2 template detection in URL validation (RED) * Fix Jinja2 false-positive when URL contains `{%` (GREEN) * Consolidate Jinja2 template detection across URL/body/headers validation * Propagate `FORCE_COLOR` to test containers * Apply suggestion from @dgtlmoon * Apply suggestion from @dgtlmoon * Only render request headers/body at fetch time when they contain Jinja2, drop FORCE_COLOR changes The edit form now skips Jinja2 validation for text like {%22 that is not a template, but processors/base.py still rendered every header and the body unconditionally, so a body such as q={%22key%22:1} was accepted on save and then failed every check with a TemplateSyntaxError. Use JINJA2_MARKER_PATTERN there too, so it is sent as-is. Also reset the CI workflow and run_*_tests.sh scripts to master, the FORCE_COLOR changes are unrelated to this fix. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: dgtlmoon <dgtlmoon@gmail.com> Co-authored-by: dgtlmoon <leigh@morresi.net> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 15:32:32 +02:00
dgtlmoonandClaude Opus 5.5	94d3404d88	Notifications - |regex_replace ReDoS timeout now works in any thread (use 'regex' package timeout=) (#4585) ... * Notifications - |regex_replace ReDoS timeout now works in any thread, use the 'regex' package timeout= instead of SIGALRM signal.alarm() can only be set from the main thread, but notifications are rendered in the notification runner threads and previews in the Flask request threads, so since #4577 the timeout was effectively never applied in production. Re #3501, follow-up to #4577 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * regex_replace - Allow the timeout to be set with the REGEX_TIMEOUT_SECONDS env var Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * regex_replace - Import 'regex' lazily inside the filter, saves ~2MB RSS per instance that never uses it Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 15:31:51 +02:00
Enes Uygur	d88f8d7b0b	Notifications - Fix |regex_replace doing nothing when rendered outside the main thread (#4577)	2026-10-23 11:47:47 +02:00
contentforge-press	e8da5fc1f0	feat(jinja2): add unixtime filter to format Unix timestamps in notifications (#3641) (#4503)	2026-10-07 16:24:24 +02:00
dgtlmoon	227b011d73	Memory usage - small improvement by tidying up module imports (#4352)	2026-09-01 17:50:50 +02:00
dgtlmoon	2149a6fe3b	Memory improvement - Use builtin markupsafe instead of creating a jinja2 template env each time for small strings (#3836)	2026-02-05 10:07:36 +01:00
dgtlmoon	181d32e82a	Template - Adding |regex_replace Re #3501 (#3536)	2025-10-24 19:09:19 +02:00
dgtlmoon	64350a2e78	Replace jinja2-time with arrow and improve timedate timezone integration, fixes timezones in templates such as {% now 'Europe/London', '%Y-%m-%d' %} etc (#3496)	2025-10-13 11:52:02 +02:00