intent/templates/issues/_event.html
Alec Perkins 604c2bbf91
Some checks failed
ci / test (push) Failing after 1m6s
ci / deploy (push) Failing after 0s
Harden for launch: limits, CSP, moderation, admin 2FA (Phase 5)
- Rate limits in the shared cache for comments, issues, uploads and
  invites; a limited HTMX reply keeps the draft.
- Content-Security-Policy (self only, no inline script or style, bucket
  origin for images and frames) and Permissions-Policy on every page.
  htmx configured not to inject styles or eval.
- Moderation: deactivating a user ends their sessions and keeps their
  content; deleted accounts show as "ghost"; reserved usernames; the
  admin won't delete an org's last owner.
- Admin requires a TOTP code (django-otp), with add_admin_totp to enrol.
- Email provider chosen by environment through django-anymail.
- Playwright browser tests: axe WCAG 2.1 AA on every page in light and
  dark, no CSP violations, keyboard walkthrough, theme toggle. Explicit
  Canvas/CanvasText on :root fixes dark-mode contrast detection.
- bin/start creates the data dir if missing; docs/operations.md runbook.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 10:51:06 -04:00

33 lines
2.1 KiB
HTML

{% comment %}One timeline event. Needs `e`, `project`.{% endcomment %}
<p class="event muted">
<strong>{{ e.actor.username|default:"ghost" }}</strong>
{% if e.kind == "status" %}
{% if e.status == "accepted" %}accepted this issue
{% elif e.status == "rejected" %}rejected this issue
{% elif e.status == "withdrawn" %}withdrew this issue
{% elif e.status == "duplicate" %}marked this a duplicate of
{% if e.duplicate_of %}<a href="{% url 'issues:detail' org_slug=project.org.slug project_slug=project.slug number=e.duplicate_of.number %}">{{ e.duplicate_of.key }} {{ e.duplicate_of.title }}</a>{% else %}a deleted issue{% endif %}
{% else %}reopened this issue
{% endif %}
{% elif e.kind == "revision" and e.feature %}
{% if e.revision.revision == 1 %}created{% else %}updated{% endif %}
<a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
{% if e.revision %}in <a href="{% url 'features:revision' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key revision=e.revision.revision %}">revision {{ e.revision.revision }}</a>: {{ e.revision.note }}{% endif %}
{% elif e.kind == "linked" and e.feature %}
linked <a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
{% elif e.kind == "unlinked" and e.feature %}
unlinked <a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
{% elif e.kind == "edited" %}
edited this issue
{% else %}
{{ e.get_kind_display|lower }}
{% endif %}
· <time datetime="{{ e.created_at|date:'c' }}">{{ e.created_at|date:"j M Y, H:i" }}</time>
</p>
{% if e.kind == "edited" %}
<details>
<summary>Before the edit</summary>
<p><strong>{{ e.old_title }}</strong></p>
{% if e.old_body %}<div class="prose">{{ e.old_html }}</div>{% else %}<p class="muted">No description.</p>{% endif %}
</details>
{% endif %}