20000b2da4
draft-review: two plain checks for a missing write token instead of a fallback that is never reached
Fixed in 20000b2: two plain checks, one for a missing write_token_variable and one for an unset token.
Fixed in 6d772b5: the line is wrapped after the semicolon.
Fixed in 6c53bb1: pandoc reads markdown_strict-raw_html+pipe_tables, which has no YAML metadata block, no raw attribute and no raw HTML (gfm and commonmark kept inline HTML despite -raw_html)…
6c53bb1714
report.html: strict Markdown without raw HTML, an own template with the policy first, script links defused
Fixed in 6c53bb1: pandoc reads markdown_strict-raw_html+pipe_tables, which has no YAML metadata block, no raw attribute and no raw HTML (gfm and commonmark kept inline HTML despite -raw_html)…
Fixed in 95d40fe: the verdict of a finding may end the line, as without a judgment of Jev. test_a_finding_without_a_judgment_of_jev_is_named_too.
Fixed in cf1f13c, as in the same finding 7101: --from markdown-raw_html keeps HTML of the draft as text, and the page has a Content Security Policy without scripts. Scenario#132.04, red/green…
Fixed in 6e75f60, as in the same finding 7094: tools/draft-review takes os.path.realpath(__file__); LinkTest calls it through a link.
Fixed in cf1f13c: pandoc reads markdown-raw_html, so HTML of the draft stays text, and the page carries `Content-Security-Policy: default-src 'none'; img-src 'self' file: data:; style-src…
cf1f13c420
report.html runs no script of the draft: no raw HTML, and a Content Security Policy without scripts
Answer to the review of 4b9622b:
- YELLOW "changes that touch security" for
werkrevisor/draftreview.py(Jev 0.95): holds as a reason for a human look, nothing to fix. The file reads the…
Fixed in 6e75f60: tools/draft-review takes os.path.realpath(__file__). Red/green by hand: through a link the old version stopped with ModuleNotFoundError, the new one reaches its own…
61b5b803ca
werkrevisor 0.61.0: tools/draft-review drafts a review for a human, with a local config and an HTML report