Florian Apolloner

249 Followers
133 Following
295 Posts
Dabbling in many things. Mostly Ops and Python stuff.
Githubhttps://github.com/apollo13
Twitter@fapolloner
Hi @webology & @wsvincent fastmail currently puts the Django news mails into spam with URIBL_DBL_ABUSE_PHISH (Contains an abused phishing URL listed in the DBL blocklist). Not really sure on how to check which URL causes this aside from trying all against the DBL. Have you run into that somewhere else?
@adamchainz @carlton @lilyf sure, more reviews don't hurt. But I'd like to point out that this is basically a reimplementation of the stuff in the go stdlib, so not exactly new territory.
@carlton looks like it, so how do we get it in ;)
@encbladexp hast böse middlewares dazwischen? Das könnte quic schwerer machen. Ob golang oder Python bei 2k Verbindungen die quasi nix tun ist vermutlich egal

Python 3.14 support added to master and to be released with the next bugfix release, tentatively in one week!

That's the foundation for the template string support, to be released with psycopg 3.3.

https://www.psycopg.org/psycopg3/docs/basic/tstrings.html

Really, really excited about this new feature!

Template string queries - psycopg 3.3.0 documentation

@carlton agreed on the UI issues itself, but I was mostly referring to the concept of code reviews itself. When contributing to Qt I had to get familiar with Gerrit and the experience there is way better. Ie you see the comments on individual patchsets and can easily follow the discussion. Something that is literally impossible for a GitHub PR as soon as it gets a bit longer and comments refer to code that no longer exists in that form
@carlton haha, I knew someone would say it. I don't have strong feelings, but I wonder what our options are. Personally I think GitHub style code review is also somewhat suboptimal for anything "large" but one could argue that this is "our" problem because such large PRs shouldn't exist. So if we were to change to something else we should look for "better" and not just a GitHub replacement.
https://words.filippo.io/csrf/ is a really nice article about how our CSRF protection in #django should look like nowadays. I wonder if we would want to patch that onto the old middleware or simply introduce a new one that solely works with "modern" browsers
Cross-Site Request Forgery

Cross-Site Request Forgery countermeasures can be greatly simplified using request metadata provided by modern browsers.

@carlton yeah that resonates with my experience as well 🤗
@carlton are you going all in for everything or mainly for highly dynamic layouts/components?