Fixed in 6e75f60, as in the same finding 7094: tools/draft-review takes os.path.realpath(__file__); LinkTest calls it through a link.
Fixed in cf1f13c: pandoc reads markdown-raw_html, so HTML of the draft stays text, and the page carries `Content-Security-Policy: default-src 'none'; img-src 'self' file: data:; style-src…
Answer to the review of 4b9622b:
- YELLOW "changes that touch security" for
werkrevisor/draftreview.py(Jev 0.95): holds as a reason for a human look, nothing to fix. The file reads the…
Fixed in 6e75f60: tools/draft-review takes os.path.realpath(__file__). Red/green by hand: through a link the old version stopped with ModuleNotFoundError, the new one reaches its own…
Holds not: this file holds the claimed change, TIMEOUT_SECONDS = 90 as the default timeout of GiteaClient (lines 9-10 and 34); the Solution of the PR document names it since 292a057.
TIMEOUT_SECONDS = 90 and the default of GiteaClient are in this file. Since 292a057 the Solution names the file next to the change.
This file only carries the version 0.60.1 (Version: patch). Since 292a057 the Solution says so.