done

Author: igennova

website/management/commands/fetch_gsoc_orgs.py

@@ -118,6 +118,10 @@ def assign_contacts(self, org, social_links):
             "facebook": "facebook",
         }
 
+        def sanitize_url(self, url):
+            """Sanitizes URLs to ensure they are safe."""
+            return re.sub(r"[^a-zA-Z0-9:/._-]", "", url)
+
         for link in social_links:
             name = link.get("name", "").lower()
             value = link.get("value", "")
@@ -128,9 +132,9 @@ def assign_contacts(self, org, social_links):
                 else:
                     setattr(org, social_mapping[name], value)
             elif "element.io" in value:
-                org.element_url = value
+                org.element_url = self.sanitize_url(value)
             elif "gitter.im" in value:
-                org.gitter_url = value
+                org.gitter_url = self.sanitize_url(value)
             elif "discord" in value:
-                org.discord_url = value
-        org.save()
+                org.discord_url = self.sanitize_url(value)
+            org.save()

website/migrations/0216_githubissue_bch_tx_id_githubissue_p2p_amount_bch_and_more.py

@@ -0,0 +1,69 @@
+# Generated by Django 5.1.6 on 2025-03-02 20:08
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+import website.models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("website", "0215_bid_github_username_alter_bid_user"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="githubissue",
+            name="bch_tx_id",
+            field=models.CharField(blank=True, max_length=255, null=True),
+        ),
+        migrations.AddField(
+            model_name="githubissue",
+            name="p2p_amount_bch",
+            field=models.DecimalField(blank=True, decimal_places=8, max_digits=18, null=True),
+        ),
+        migrations.AddField(
+            model_name="githubissue",
+            name="p2p_amount_usd",
+            field=models.DecimalField(blank=True, decimal_places=2, max_digits=10, null=True),
+        ),
+        migrations.AddField(
+            model_name="githubissue",
+            name="p2p_payment_created_at",
+            field=models.DateTimeField(blank=True, null=True),
+        ),
+        migrations.AddField(
+            model_name="githubissue",
+            name="sent_by_user",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                related_name="github_issue_p2p_payments",
+                to=settings.AUTH_USER_MODEL,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="bid",
+            name="bch_address",
+            field=models.CharField(
+                blank=True, max_length=100, null=True, validators=[website.models.validate_bch_address]
+            ),
+        ),
+        migrations.AlterField(
+            model_name="userprofile",
+            name="bch_address",
+            field=models.CharField(
+                blank=True, max_length=100, null=True, validators=[website.models.validate_bch_address]
+            ),
+        ),
+        migrations.AlterField(
+            model_name="userprofile",
+            name="btc_address",
+            field=models.CharField(
+                blank=True, max_length=100, null=True, validators=[website.models.validate_btc_address]
+            ),
+        ),
+    ]

website/migrations/0216_auto_20250302_2018.py website/migrations/0217_auto_20250302_2018.py

@@ -3,7 +3,7 @@
 
 class Migration(migrations.Migration):
     dependencies = [
-        ("website", "0215_bid_github_username_alter_bid_user"),
+        ("website", "0216_githubissue_bch_tx_id_githubissue_p2p_amount_bch_and_more"),
     ]
 
     operations = [

website/migrations/0217_organization_discord_url_organization_element_url_and_more.py website/migrations/0218_organization_discord_url_organization_element_url_and_more.py

@@ -5,7 +5,7 @@
 
 class Migration(migrations.Migration):
     dependencies = [
-        ("website", "0216_auto_20250302_2018"),
+        ("website", "0217_auto_20250302_2018"),
     ]
 
     operations = [