d0a550fee6
- Extract comment templates into reusable partials (_comment.html, _comment_form.html, _comment_list.html, _reply_form.html, etc.) - Add HTMX progressive enhancement: inline form submission with partial responses, delta polling for live updates, form reset on success, success/moderation toast feedback - Integrate Cloudflare Turnstile for invisible bot protection: server-side token validation with hostname check, fail-closed on errors/timeouts, feature-flagged via TURNSTILE_SECRET_KEY env var - Auto-approve comments that pass Turnstile; keep manual approval as fallback when Turnstile is disabled (model default stays False) - Add CommentReaction model with UniqueConstraint for session-based anonymous reactions (heart/thumbs-up), toggle support, separate rate-limit bucket (20/min) - Add comment poll endpoint (GET /comments/poll/<id>/?after_id=N) for HTMX delta polling without duplicates - Update CSP middleware to allow challenges.cloudflare.com in script-src, connect-src, and frame-src - Self-host htmx.min.js (v2.0.4) to minimize CSP surface area - Add django-htmx middleware and requests to dependencies - Add Unapprove bulk action to Wagtail admin for moderation - Extend PII purge command to anonymize reaction session_key - Design refresh: neon glow avatars, solid hover shadows, gradient section header, cyan reply borders, grid-pattern empty state, neon-pink focus glow on form inputs - Add turnstile_site_key to template context via context processor - 18 new tests covering HTMX contracts, Turnstile success/failure/ timeout/hostname-mismatch, polling deltas, reaction toggle/dedup/ rate-limit, CSP headers, and PII purge extension Closes #43 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
27 lines
490 B
Plaintext
27 lines
490 B
Plaintext
Django~=5.2.0
|
|
wagtail~=7.0.0
|
|
wagtail-seo~=3.1.1
|
|
psycopg2-binary~=2.9.0
|
|
Pillow~=12.1
|
|
django-taggit~=6.0.0
|
|
whitenoise~=6.0.0
|
|
gunicorn~=23.0.0
|
|
python-dotenv~=1.0.0
|
|
dj-database-url~=2.2.0
|
|
django-tailwind~=3.8.0
|
|
django-csp~=3.8.0
|
|
django-htmx~=1.21.0
|
|
requests~=2.32.0
|
|
pytest~=8.3.0
|
|
pytest-django~=4.9.0
|
|
pytest-cov~=5.0.0
|
|
pytest-benchmark~=4.0.0
|
|
factory-boy~=3.3.0
|
|
wagtail-factories~=4.2.0
|
|
feedparser~=6.0.0
|
|
playwright~=1.57.0
|
|
pytest-playwright~=0.7.0
|
|
ruff~=0.6.0
|
|
mypy~=1.11.0
|
|
django-stubs~=5.1.0
|