olemd/soapbox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Lisensier under AGPL-3.0-or-later og lenk til kildekoden i footeren

Browse source 
AGPL §13 krever at brukere av en nettverkstjeneste kan hente kildekoden;
temaet viser derfor en lenke til repoet på hver side.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JcEy43fNYpwg6K6oTKakWR
This commit is contained in:
Ole-Morten Duesund 2026-08-26 13:13:25 +02:00
commit 6fef73793f
7 changed files with 686 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tests/test_app.py
View file

@ -62,7 +62,9 @@ def test_full_flow_owner(client, cfg):
assert 'href="../theme/style.css"' in html
assert 'href="../"' in html # intern lenke omskrevet til relativ
assert client.get("/groent-er-skjoent/mitt-bilde.png").status_code == 200
assert "Grønt er skjønt" in client.get("/").text
front = client.get("/").text
assert "Grønt er skjønt" in front
assert 'href="https://kode.naiv.no/olemd/soapbox"' in front # AGPL: lenke til kilden
feed = client.get("/feed.xml").text
assert "https://blog.example.no/groent-er-skjoent/" in feed
@ -152,8 +154,11 @@ def test_no_inline_js_with_content(client, cfg):
"""Titler med anførselstegn skal ikke havne i en JS-kontekst (XSS)."""
post_id = _create_post(client)
token = csrf(client)
title = "Ola's \"test\" <b>"
r = client.post(f"/admin/edit/{post_id}", data={"csrf": token, "title": title, "body": "x", "action": "save"})
title = 'Ola\'s "test" <b>'
r = client.post(
f"/admin/edit/{post_id}",
data={"csrf": token, "title": title, "body": "x", "action": "save"},
)
html = client.get(r.headers["Location"]).text
assert "onsubmit=" not in html and "onclick=" not in html
assert "Ola&#39;s" in html