d0a550fee6
- Extract comment templates into reusable partials (_comment.html, _comment_form.html, _comment_list.html, _reply_form.html, etc.) - Add HTMX progressive enhancement: inline form submission with partial responses, delta polling for live updates, form reset on success, success/moderation toast feedback - Integrate Cloudflare Turnstile for invisible bot protection: server-side token validation with hostname check, fail-closed on errors/timeouts, feature-flagged via TURNSTILE_SECRET_KEY env var - Auto-approve comments that pass Turnstile; keep manual approval as fallback when Turnstile is disabled (model default stays False) - Add CommentReaction model with UniqueConstraint for session-based anonymous reactions (heart/thumbs-up), toggle support, separate rate-limit bucket (20/min) - Add comment poll endpoint (GET /comments/poll/<id>/?after_id=N) for HTMX delta polling without duplicates - Update CSP middleware to allow challenges.cloudflare.com in script-src, connect-src, and frame-src - Self-host htmx.min.js (v2.0.4) to minimize CSP surface area - Add django-htmx middleware and requests to dependencies - Add Unapprove bulk action to Wagtail admin for moderation - Extend PII purge command to anonymize reaction session_key - Design refresh: neon glow avatars, solid hover shadows, gradient section header, cyan reply borders, grid-pattern empty state, neon-pink focus glow on form inputs - Add turnstile_site_key to template context via context processor - 18 new tests covering HTMX contracts, Turnstile success/failure/ timeout/hostname-mismatch, polling deltas, reaction toggle/dedup/ rate-limit, CSP headers, and PII purge extension Closes #43 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
39 lines
1.2 KiB
Python
39 lines
1.2 KiB
Python
from __future__ import annotations
|
|
|
|
from datetime import timedelta
|
|
|
|
from django.core.management.base import BaseCommand
|
|
from django.utils import timezone
|
|
|
|
from apps.comments.models import Comment, CommentReaction
|
|
|
|
|
|
class Command(BaseCommand):
|
|
help = "Nullify comment personal data for comments older than the retention window."
|
|
|
|
def add_arguments(self, parser):
|
|
parser.add_argument(
|
|
"--months",
|
|
type=int,
|
|
default=24,
|
|
help="Retention window in months before personal data is purged (default: 24).",
|
|
)
|
|
|
|
def handle(self, *args, **options):
|
|
months = options["months"]
|
|
cutoff = timezone.now() - timedelta(days=30 * months)
|
|
|
|
purged = (
|
|
Comment.objects.filter(created_at__lt=cutoff)
|
|
.exclude(author_email="")
|
|
.update(author_email="", ip_address=None)
|
|
)
|
|
self.stdout.write(self.style.SUCCESS(f"Purged personal data for {purged} comment(s)."))
|
|
|
|
reactions_purged = (
|
|
CommentReaction.objects.filter(created_at__lt=cutoff)
|
|
.exclude(session_key="")
|
|
.update(session_key="")
|
|
)
|
|
self.stdout.write(self.style.SUCCESS(f"Purged session keys for {reactions_purged} reaction(s)."))
|