- Rate limits in the shared cache for comments, issues, uploads and invites; a limited HTMX reply keeps the draft. - Content-Security-Policy (self only, no inline script or style, bucket origin for images and frames) and Permissions-Policy on every page. htmx configured not to inject styles or eval. - Moderation: deactivating a user ends their sessions and keeps their content; deleted accounts show as "ghost"; reserved usernames; the admin won't delete an org's last owner. - Admin requires a TOTP code (django-otp), with add_admin_totp to enrol. - Email provider chosen by environment through django-anymail. - Playwright browser tests: axe WCAG 2.1 AA on every page in light and dark, no CSP violations, keyboard walkthrough, theme toggle. Explicit Canvas/CanvasText on :root fixes dark-mode contrast detection. - bin/start creates the data dir if missing; docs/operations.md runbook. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
33 lines
2.1 KiB
HTML
33 lines
2.1 KiB
HTML
{% comment %}One timeline event. Needs `e`, `project`.{% endcomment %}
|
|
<p class="event muted">
|
|
<strong>{{ e.actor.username|default:"ghost" }}</strong>
|
|
{% if e.kind == "status" %}
|
|
{% if e.status == "accepted" %}accepted this issue
|
|
{% elif e.status == "rejected" %}rejected this issue
|
|
{% elif e.status == "withdrawn" %}withdrew this issue
|
|
{% elif e.status == "duplicate" %}marked this a duplicate of
|
|
{% if e.duplicate_of %}<a href="{% url 'issues:detail' org_slug=project.org.slug project_slug=project.slug number=e.duplicate_of.number %}">{{ e.duplicate_of.key }} {{ e.duplicate_of.title }}</a>{% else %}a deleted issue{% endif %}
|
|
{% else %}reopened this issue
|
|
{% endif %}
|
|
{% elif e.kind == "revision" and e.feature %}
|
|
{% if e.revision.revision == 1 %}created{% else %}updated{% endif %}
|
|
<a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
|
|
{% if e.revision %}in <a href="{% url 'features:revision' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key revision=e.revision.revision %}">revision {{ e.revision.revision }}</a>: {{ e.revision.note }}{% endif %}
|
|
{% elif e.kind == "linked" and e.feature %}
|
|
linked <a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
|
|
{% elif e.kind == "unlinked" and e.feature %}
|
|
unlinked <a href="{% url 'features:detail' org_slug=project.org.slug project_slug=project.slug feature_key=e.feature.key %}">{{ e.feature.key }} {{ e.feature.title }}</a>
|
|
{% elif e.kind == "edited" %}
|
|
edited this issue
|
|
{% else %}
|
|
{{ e.get_kind_display|lower }}
|
|
{% endif %}
|
|
· <time datetime="{{ e.created_at|date:'c' }}">{{ e.created_at|date:"j M Y, H:i" }}</time>
|
|
</p>
|
|
{% if e.kind == "edited" %}
|
|
<details>
|
|
<summary>Before the edit</summary>
|
|
<p><strong>{{ e.old_title }}</strong></p>
|
|
{% if e.old_body %}<div class="prose">{{ e.old_html }}</div>{% else %}<p class="muted">No description.</p>{% endif %}
|
|
</details>
|
|
{% endif %}
|