Difference between revisions of "User:Ryan52/old todo"
Jump to navigation
Jump to search
(blah) |
(fix formatting in parts) |
||
Line 35: | Line 35: | ||
* security fixing | * security fixing | ||
** CSRF (use rails' protect_from_forgery and verify methods) | ** CSRF (use rails' protect_from_forgery and verify methods) | ||
− | *** Look at this: [http://github.com/emk/mephisto/commit/c500bf8e05c250d02672c30d079a0bdeb66f0569] | + | *** Look at this: [http://github.com/emk/mephisto/commit/c500bf8e05c250d02672c30d079a0bdeb66f0569] looks really kewl! |
− | looks really kewl! | + | ** check for SQL injection, we won't have to worry about this in most places since we use active record, but the reports where we use SQL directly should be checked. |
− | ** check for SQL injection, we won't have to worry about this in most | ||
− | places since we use active record, but the reports where we use SQL directly should be checked. | ||
** [http://guides.rubyonrails.org/security.html Rails Security Guide] | ** [http://guides.rubyonrails.org/security.html Rails Security Guide] | ||
Revision as of 00:00, 7 January 2009
o hai
Because I don't like trac. I probably don't like any project management program for that matter. Using this because I loose TODO files on my system too easily. :p
features wanted
list of features wanted, most from a discussion with kc8pxy (some will be taken care of by him/his coders), others need my help. and the first two are from us.
- settings page (admin password, everything in the defaults table, metadata too..)
- 01:17 <kc8pxy> volunteer certification trancking
- 01:17 <Ryan52> aka contact_types? :)
- 01:18 <kc8pxy> btu i don't want unilateral designation.
- 01:18 <kc8pxy> i want to have 2 or 3 people to "vote" them competent.
todo list - a bunch of crap that nobody cares about
i'm working on
- library
- reports over time
current sprint
needed
- update the release scripts for git (IMPORTANT!!! because I'm really stupid sometimes)
- coveredness without contracts is broken -- no big deal
- speed up the regex in the vhosting stuff wrt printme, so that it caches results.
- disable certain gizmo_types
- deadbeat discounts weren't setting occured_at -- fixed, but need to clean up data again...
- gizmo_types changes (#581)
- covered report
would be nice
- update the documentation (meh, not *that* important)
- use a fgdb-container with a submodule to the real thing, with the current branch
- add notes via gui
- switch to rspec
- and get tests that work
- "power user" multiple systems per line item
- security fixing
- CSRF (use rails' protect_from_forgery and verify methods)
- Look at this: [1] looks really kewl!
- check for SQL injection, we won't have to worry about this in most places since we use active record, but the reports where we use SQL directly should be checked.
- Rails Security Guide
- CSRF (use rails' protect_from_forgery and verify methods)
things left for git
- gitweb on devo (currently have it on my vps...)
- trac (or switch to ticgit)
- cruise control (useless since all of the tests are broken)
- rewrite the commit email script -- it sucks (I can live with it now)
- figure out somewhere for the devel data to live that is faster than the horrible freegeek dsl (maybe on my home server?) (I don't care -- sneakernet ftw!)
- ticgit
should do soonish
- work on library stuff
- vhost based routes for separating fgdb and library, and having a setup page. I'm working on this at a glaciers pace, but I'm still working on it.
- make it work with rails 2.2.2
for a rainy day
- look closer at the XSS stuff -- I got a lot of em
- the on_display stuff for contact searches is an XSS bug, sort of. regardless, it should be cleaned up.
- remove cruft from that ajax helper thing
- get rid of duplicated data in code
- conditions stuff is all over the place
- permissions for various controllers are split between the sidebar and the controller itself
- fgss generic regexps
- move the vendor/plugins to their own submodules...maybe I shoulda done this first, since it's gonna get even more messy with the git bug...anyway, too late for that, whatever. I'll work it out :)
- update them
what I did today
Moved to ChangeLog