pgweb.git - This is the code for the postgresql.org website

Age	Commit message (Collapse)	Author
2021-05-24	Add missing model change	Magnus Hagander

2021-03-28	Add page with additional details about a CVE	Jonathan S. Katz
	This page contains most information that may be found on 3rd party sites about a particular CVE, but with the benefit of being hosted on the PostgreSQL infrastructure. This does require inserting the CVE description into the website, which will include backporting the CVE descriptions throughout many existing CVEs, but the added benefit is that this information is available when we publish a release, vs. waiting for a 3rd party to publish the info. This patch also adds sitemap indexing for each of the CVE entries, and ensures the top-level CVE URL is in the sitemap.
2021-03-27	Refactor generation of CVE number from CVE ID	Jonathan S. Katz
	This allows the method to be repurposed in additional parts of the pgweb codebase.
2021-03-27	Update CVE ID syntax validator	Jonathan S. Katz
	The current validator stopped after 5 digits, whereas there can be an aribtrary amount. However, the MITRE docs appear to stop at 7, so this seems like a sane cut-off, until it's not[1]. [1] https://cve.mitre.org/cve/identifiers/syntaxchange.html#new
2020-03-31	Set on_delete=models.CASCADE on all ForeignKey fields	Magnus Hagander
	This is the bardware compatible value that will be needed once we upgrade django later.
2020-01-09	Fix a number of incorrect escapes	Magnus Hagander
	Pointed out by newer versions of pep8, but they were never correct.
2019-01-26	More generic changes from 2to3	Magnus Hagander

2019-01-26	Generic unicode updates	Magnus Hagander

2019-01-26	Update to new style exception catching	Magnus Hagander

2019-01-17	Fix deprecated comparison structs	Magnus Hagander

2019-01-17	Fix whitespace and indentation, per pep8	Magnus Hagander

2019-01-17	Tabs, meet your new overlords: spaces	Magnus Hagander
	In a quest to reach pep8, use spaces to indent rather than tabs.
2018-06-29	Remove unused variable references	Magnus Hagander

2018-02-25	Allow unlinked CVEs and poll for valid links	Magnus Hagander
	This way new CVEs that are added will start off being listed, but not with a link. When upstream (currently redhat) publishes the CVE, a cronjob will pick this up and update it with a link. Of course, we still only show CVEs that are listed as public, but this should hopefully get rid of some of the questions of why we link to a 404.
2018-01-25	Database:ify the list of security patches	Magnus Hagander
	This finally moves the patches into the db, which makes it a lot easier to filter patches in the views. It also adds the new way of categorising patches, which is assigning them a CVSSv3 score. For now, there are no public views to this, and the old static pages remain. This is so we can backfill all existing security patches before we make it public.