948 Commits

Author SHA1 Message Date
Dirkjan Ochtman
25eae265a2 Fix needless borrowing 2021-06-14 11:47:13 +02:00
Alex Wennerberg
c0e75554d2
Remove forward-slash escape (#486)
This was based off of the OWASP XSS prevention cheat sheet --
https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html#output-encoding-rules-summary

However, there isn't really any attack vector based on forward slash alone, and
it's being removed in the next version of that document.

> There is no proof that escaping forward slash will improve
> defense against XSS, if all other special characters are escaped
> properly, but it forces developers to use non-standard implementation of
> the HTML escaping, what increases the risk of the mistake and makes the
> implementation harder.

https://github.com/OWASP/CheatSheetSeries/pull/516
2021-05-17 21:33:47 +02:00
vallentin
92df4d1fe4 Fixed not found in scope error 2021-04-29 13:08:49 +02:00
Dirkjan Ochtman
c7b87bae4f Tweak dependabot ignore settings 2021-04-29 11:45:03 +02:00
SamJakob
4ea3df92a1
Add section to README for IDE plugins (#474) 2021-04-29 11:42:00 +02:00
dependabot-preview[bot]
0d42f8ece4 Upgrade to GitHub-native Dependabot 2021-04-29 10:43:46 +02:00
SciStarterOwner
451ef35011
Use raw identifiers for identifiers which collide with Rust keywords (#476)
Co-authored-by: Daniel Arbuckle <djarb@highenergymagic.org>
2021-04-21 09:27:18 +02:00
Dirkjan Ochtman
d43faa89f1 Eliminate common tails from branches 2021-04-13 07:10:52 +02:00
Dirkjan Ochtman
9232cafb66 askama_tide: suppress clippy::from-over-into lint 2021-03-30 09:59:12 +02:00
Dirkjan Ochtman
c0e01318ac Use mem::take() where applicable 2021-03-30 09:59:12 +02:00
Dirkjan Ochtman
46792fe843 Rename test types to PascalCase 2021-03-30 09:59:12 +02:00
mbuscemi
4ca966178c updated the book to describe the new paragraphbreaks filter 2021-03-22 13:23:08 +01:00
mbuscemi
e018c4a427 added paragraphbreaks function 2021-03-22 13:23:08 +01:00
Dirkjan Ochtman
e1d607f993 askama_gotham: bump version to 0.12.0 2021-03-22 09:38:02 +01:00
Dirkjan Ochtman
495b978cea askama_gotham: bump to 0.6 2021-03-22 09:38:02 +01:00
technic93
6a230cb358 Update version in README.md 2021-03-21 21:32:38 +01:00
technic93
f3f2a7e206 fix typo in docstring 2021-03-14 20:33:49 +01:00
vallentin
7b954cd788 Added path and ext tests 2021-03-10 13:09:56 +01:00
vallentin
d6c05d8eb9 Changed to allow both path and ext 2021-03-10 13:09:56 +01:00
vallentin
606c68dd34 Added extension tests 2021-03-10 13:09:56 +01:00
vallentin
8566d8258a Fixed extension to ignore common jinja extensions (fixes #457) 2021-03-10 13:09:56 +01:00
vallentin
7291494e6a Refactored getting path extension 2021-03-10 13:09:56 +01:00
Dirkjan Ochtman
96a4328d64 Fix style suggestion per nightly clippy 2021-02-28 21:51:53 +01:00
vallentin
5a799af090 Reworked constants to be parsed as paths 2021-02-23 09:51:27 +01:00
vallentin
bfeaf5d6d8 Added option test 2021-02-22 13:50:09 +01:00
vallentin
a07a1d8b7b Added var and path parser tests 2021-02-22 13:50:09 +01:00
vallentin
fb080df3ed Fixed path parser to account for single identifier type names 2021-02-22 13:50:09 +01:00
vallentin
7609f00c4b Added range test case 2021-02-22 13:05:44 +01:00
vallentin
e021e027ba Removed needless borrow of range 2021-02-22 13:05:44 +01:00
Frederik B
cfcda7b0e9 Update askama_warp/README.md
The file calls itself the readme for askama_actix, but clearly it's warp.
2021-02-17 21:17:09 +01:00
Dirkjan Ochtman
2dbdcdfb64 Rename askama_actix trait method as suggested by clippy
By bumping the dependency versions for askama and askama_shared, this should
be safe.
2021-02-15 11:10:48 +01:00
Dirkjan Ochtman
f5f35dad56 Fix formatting for rust 1.50.0 2021-02-15 11:10:48 +01:00
Edgar
ae3a5dda2b Fix bitvec broken dependency temporarily 2021-02-15 10:49:19 +01:00
Dirkjan Ochtman
e72f93813f Ignore .DS_Store files 2021-02-05 10:47:35 +01:00
Dirkjan Ochtman
7af6e1fc66 shared: remove accidentally added .DS_Store file 2021-02-05 10:47:35 +01:00
Dirkjan Ochtman
e75a8a2065 askama_tide: bump version to 0.13.0 2021-02-04 10:53:20 +01:00
Dirkjan Ochtman
f93c5a0d7b Bring Ws type name in line with API guidelines 2021-02-01 14:54:33 +01:00
dependabot-preview[bot]
9c4bb9f3c3 Update tide requirement from 0.15 to 0.16
Updates the requirements on [tide](https://github.com/http-rs/tide) to permit the latest version.
- [Release notes](https://github.com/http-rs/tide/releases)
- [Commits](https://github.com/http-rs/tide/compare/v0.15.0...v0.16.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-02-01 14:42:34 +01:00
Dirkjan Ochtman
95e346e55f Apply suggestions from nightly clippy 2021-01-22 19:55:45 +01:00
Paolo Barbolini
efa42285e3 Upgrade to warp 0.3 2021-01-19 23:30:10 +01:00
Wim Looman
54a2046edc Add no_std support to askama_escape 2021-01-15 23:35:33 +01:00
vallentin
000aff4a18 Added constants test 2021-01-13 08:58:49 +01:00
vallentin
912bbeb395 Fixed constants (fixes #291) 2021-01-13 08:58:49 +01:00
vallentin
560d219c26 Added urlencode filter to book 2021-01-06 23:08:11 +01:00
vallentin
116d96dd30 Added missing punctuation and backticks 2021-01-06 23:08:11 +01:00
vallentin
2dd88e8a9b Added abs filter to book 2021-01-06 23:08:11 +01:00
vallentin
b90dc8cd2d Improved comment parsing test 2021-01-06 23:03:49 +01:00
vallentin
f709bf7ffb Fixed comment parsing 2021-01-06 23:03:49 +01:00
vallentin
f9db4446d5 Added copy literals related test case 2021-01-05 16:17:14 +01:00
vallentin
b76f7ef778 Removed implicit borrowing of literals, calls, and more (fixes #404) 2021-01-05 16:17:14 +01:00