Alec Perkins
604c2bbf91
- Rate limits in the shared cache for comments, issues, uploads and invites; a limited HTMX reply keeps the draft. - Content-Security-Policy (self only, no inline script or style, bucket origin for images and frames) and Permissions-Policy on every page. htmx configured not to inject styles or eval. - Moderation: deactivating a user ends their sessions and keeps their content; deleted accounts show as "ghost"; reserved usernames; the admin won't delete an org's last owner. - Admin requires a TOTP code (django-otp), with add_admin_totp to enrol. - Email provider chosen by environment through django-anymail. - Playwright browser tests: axe WCAG 2.1 AA on every page in light and dark, no CSP violations, keyboard walkthrough, theme toggle. Explicit Canvas/CanvasText on :root fixes dark-mode contrast detection. - bin/start creates the data dir if missing; docs/operations.md runbook. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
46 lines
1.7 KiB
HTML
46 lines
1.7 KiB
HTML
{% extends "projects/base.html" %}
|
|
|
|
{% block page_title %}Issues{% endblock %}
|
|
|
|
{% block project_content %}
|
|
<h1>Issues</h1>
|
|
{% if access.can_contribute %}
|
|
<p><a href="{% url 'issues:create' org_slug=project.org.slug project_slug=project.slug %}">New issue</a></p>
|
|
{% endif %}
|
|
|
|
<nav aria-label="Filter issues">
|
|
<ul>
|
|
{% for key, label in filters %}
|
|
<li><a href="?status={{ key }}"{% if key == current %} aria-current="page"{% endif %}>{{ label }}</a></li>
|
|
{% endfor %}
|
|
</ul>
|
|
</nav>
|
|
|
|
{% if issues %}
|
|
<table>
|
|
<caption class="visually-hidden">{% for key, label in filters %}{% if key == current %}{{ label }}{% endif %}{% endfor %} issues</caption>
|
|
<thead>
|
|
<tr>
|
|
<th scope="col">Issue</th>
|
|
<th scope="col">Status</th>
|
|
<th scope="col">Features</th>
|
|
<th scope="col">Opened by</th>
|
|
<th scope="col">Updated</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{% for issue in issues %}
|
|
<tr>
|
|
<th scope="row"><a href="{% url 'issues:detail' org_slug=project.org.slug project_slug=project.slug number=issue.number %}">{{ issue.key }} {{ issue.title }}</a></th>
|
|
<td>{{ issue.get_status_display }}</td>
|
|
<td>{% for f in issue.features.all %}{{ f.key }}{% if not forloop.last %}, {% endif %}{% empty %}—{% endfor %}</td>
|
|
<td>{{ issue.author.username|default:"ghost" }}</td>
|
|
<td><time datetime="{{ issue.updated_at|date:'c' }}">{{ issue.updated_at|date:"j M Y" }}</time></td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
{% else %}
|
|
<p>No {% if current != "all" %}{{ current }} {% endif %}issues.</p>
|
|
{% endif %}
|
|
{% endblock %}
|