stephenmcd

import os
import time

from django.conf import settings
from django.contrib.auth.models import User
from django.core.management.base import NoArgsCommand
from django.db.models import Sum
import psutil
import redis
import statsd

stephenmcd

from unicodedata import bidirectional
from django.template.defaultfilters import striptags
from rest_framework import serializers

class RTLField(serializers.BooleanField):

    def __init__(self, *args, **kwargs):
        kwargs.setdefault("read_only", True)
        super(RTLField, self).__init__(*args, **kwargs)

stephenmcd

import cgi
import getpass
import mechanize
import json
import SimpleHTTPServer
import SocketServer
import uuid

stephenmcd

from django.utils.encoding import force_unicode
from django.utils.functional import Promise

def deep_force_unicode(value):
    """
    Recursively call force_unicode on value.
    """
    if isinstance(value (list, tuple, set)):
        value = type(value)(map(deep_force_unicode, value))
    elif isinstance(value, dict):

stephenmcd

#!/usr/bin/env python

import os
import sys
import urllib

name, url, num = sys.argv[1:]
print name, url, num
first = not os.path.exists("output.csv")
f = open("output.csv", "a")

stephenmcd

import os

translators = []
languages = []

for root, dirs, files in os.walk("mezz_current/mezzanine"):
    if root.endswith("locale"):
        languages.extend(dirs)
    for name in files:
        if name == "django.po":

stephenmcd

#!/usr/bin/env python
"""
Given the current directory contains multiple repositories, each with a 
requirements/project.txt file, build a report of all requirements.
"""

import os

reqs = {}

stephenmcd

from django.template.loader_tags import ExtendsNode

def get_extends_parent(self, context):
    """
    Patched onto Django's ``ExtendsNode.get_parent`` which is
    responsible for loading the template to extend from with
    the ``extends`` template tag.

    This patch allows the template foo/bar.html to extend
    foo/bar.html, given that there is another version of it that

stephenmcd

"""

XSS privilege escalation by malicious non-superuser admin users.

Fixed in Mezzanine 1.0.9:
https://bitbucket.org/stephenmcd/mezzanine/changeset/40cbc47b8d8a

If an admin user was to create their own POST submit to any forms with a 
RichTextField, they could include JavaScript that does the following: 

stephenmcd

from collections import namedtuple

from django.test import TestCase
from requests.auth import HTTPBasicAuth
import slumber


class SlumberTestClientAPI(slumber.API):
    """
    Subclass of ``slumber.API`` that patches ``requests.request``