Dan Jacob

Hardcoded context and scheme

1

The context "/solr/" and "http://" look like they are hardcoded into the URL building functions. Would it be possible to replace these with options?

Use of localStorage for JWT tokens insecure?

5

Reviewing the frontend code, I saw that it appears the Vuex store saves the JWT tokens in localStorage, against [common security recommendations](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/HTML5_Security_Cheat_Sheet.md#local-storage). Although this is just an example project, it's...

hx-boost or hx-push-url : reloading browser session does not reload full page if html fragment returned

14

Note: I'm not sure if this is necessarily fixable with htmx due to the way the browsers behave, but it might be something that needs to be highlighted in the...

HX-Redirect: how to do a full redirect and avoid hx-target?

5

Consider this common form validation pattern: 1. I have a form that gets posted to the server. 2. If form validation occurs, just return the content with error messages+user input...

Using lazy_gettext with components breaks JSON encoding

1

```python from django.utils.translation import gettext_lazy as _ values_dropdown = dcc.Dropdown( id="value", options=[ {"label": _("All values"), "value": "all"}, {"label": _("Value A"), "value": "a"}, {"label": _("Value B"), "value": "b"}, ], value="all", className="col-md-12",...

Does not support Django 4.1

1

## What happened? Incompatibility between django-cachalot and django 4.1 on install: ``` Because django-cachalot (2.5.1) depends on Django (>=2.2,2.5.1,=2.5.1,=2.2,

adapter extracting incorrect root

1

I'm unable to save a model due to ember-cli-form-data extracting the incorrect root. Model: ``` export default Model.extend({ title: attr(), image: attr('file'), description: attr(), thumbnail: attr(), createdAt: attr('date') }); ```...

htmx ignores hx-* options if calling element is removed

1

Use case: there is a link in a modal. Links in the modal have the following top-level settings: ```

Allow custom cursor class

1

At the moment all Document classes must use MongoDocumentCursor. It should be possible to instead have a cursor_class class property (with MongoDocumentCursor as default) to allow a custom cursor class...

Thumbnail tag:redis.exceptions.ResponseError: wrong number of arguments for 'auth' command

1

Just upgraded to Django 3 + latest sorl-thumbnail. Currently *all* thumbnails on site are broken. Was working prior to upgrade. django==3.0.2 django-redis==4.11.0 redis==3.4.0 sorl-thumbnail==12.6.2 > 2020-01-31T15:42:29.961961+00:00 app[web.1]: if nativestr(self.read_response()) !=...