static/robots.txt @@ -8,6 +8,10 @@ handlers: static_files: static/favicon.ico upload: static/favicon.ico +- url: /robots.txt + static_files: static/robots.txt + upload: static/robots.txt + - url: /css static_dir: static/css app.yaml @@ -95,3 +95,14 @@ class Comment(search.SearchableModel): self.delete() return "deleted" +class Profile(db.Model): + name = db.StringProperty() # screen name + twitter = db.StringProperty() # twitter id + user = db.UserProperty() + radar_count = db.IntegerProperty() + +class Bump(db.Model): + radar = db.ReferenceProperty(Radar) # users can bump radars to raise their profile + user = db.UserProperty() # the bumping user + created = db.DateTimeProperty() # when the bump was added + models.py @@ -2,6 +2,7 @@ <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"/> +{% block meta-description %}{% endblock %} <link href="/css/screen.css" rel="stylesheet" type="text/css"/> <script src="/js/jquery-1.2.6.min.js" type="text/javascript" charset="utf-8"></script> {%block additionalincludes %}{%endblock%} templates/base.html @@ -4,12 +4,12 @@ {% for radar in radars %} <tr> <td> -<a href="rdar://problem/{{ radar.number }}">rdar</a>://<a href="/{{ radar.number }}">{{ radar.number }}</a> +<a href="rdar://problem/{{ radar.number|escape }}">rdar</a>://<a href="/{{ radar.number|escape }}">{{ radar.number|escape }}</a> </td> -<td>{{ radar.status }}</td> -<td>{{ radar.username }}</td> -<td>{{ radar.product }}</td> -<td><a href="/{{ radar.number }}">{{ radar.title }}</a></td> +<td>{{ radar.status|escape }}</td> +<td>{{ radar.username|escape }}</td> +<td>{{ radar.product|escape }}</td> +<td><a href="/{{ radar.number }}">{{ radar.title|escape }}</a></td> </tr> {% endfor %} {% endif %} templates/biglist.html @@ -4,14 +4,13 @@ <script src="/js/comments.js" type="text/javascript" charset="utf-8"></script> {% endblock %} - -{% block title %}rdar://{{ radar.number }}: {{ radar.title|escape }}{% endblock %} +{% block title %}rdar://{{ radar.number|escape }}: {{ radar.title|escape }}{% endblock %} {% block content %} <h3>{{ radar.title|escape }}</h3> <div> <table> -<tr><td>Originator:</td><td style="min-width:200px">{{ radar.username }}</td> +<tr><td>Originator:</td><td style="min-width:200px">{{ radar.username|escape }}</td> {% if mine %} <td><a href="/myradars/edit?id={{ radar.key.id }}">Modify My Radar</a></td> {% else %} @@ -19,7 +18,7 @@ {% endif %} </tr> -<tr><td>Number:</td><td><a href="rdar://problem/{{ radar.number }}">rdar</a>://<a href="/{{radar.number}}">{{ radar.number }}</a></td> +<tr><td>Number:</td><td><a href="rdar://problem/{{ radar.number|escape }}">rdar</a>://<a href="/{{radar.number}}">{{ radar.number|escape }}</a></td> <td>Date Originated:</td><td>{{ radar.originated|default_if_none:"" }}</td></tr> <tr><td>Status:</td><td>{{ radar.status|default_if_none:"" }}</td> templates/radar-view.html f4f3f47e78b2d0f8fe7e5cf811bd0a0b95d0cfe8 Tim Burks tim@neontology.com http://github.com/timburks/openradar/commit/41c734a53972d22e35a61dd0f5ba8638215a53ae 41c734a53972d22e35a61dd0f5ba8638215a53ae

2008-11-30T11:37:02-08:00

Better HTML escaping, robots.txt to prevent indexing of the API. 56142599e6f4568acba11358d6bd33bc2b770351 Tim Burks tim@neontology.com