arno/isso
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
A Disqus alternative https://posativ.org/isso/
965 Commits 14 Branches 38 Tags 5.8 MiB
Python 62.7%
JavaScript 28.7%
HTML 3.8%
CSS 3.1%
Makefile 0.6%
Other 1.1%
9618c0f3a3
Go to file
Vincent Bernat 9618c0f3a3 jade: avoid using eval once compiled 
Use of eval is handy when we need to automatically reload a
template. However, in production, this is slow and unsafe. Moreover,
when using CSP, we have to use 'unsafe-eval' which brings shame to
most of us. It appears use of eval() is not needed because the
template has already been translated to Javascript. We just need to
bind "jade" to its local scope.

So, we add an additional wrapper function binding "jade" to the local
scope. Moreover, when compiling the template, we add a flag to the
function to know it has already been compiled. In this case, we
execute it with "jade" in its scope. Otherwise, we keep using eval.

Quickly tested in both situations. Seem to work.

Fix #274.
2018-04-17 22:54:22 +02:00
.tx add Transifex project configuration file 2014-01-06 18:21:30 +01:00
ansible Make Vagrant actually work 2015-08-25 13:32:57 +01:00
bin fix tx-push script to work with GNU mktemp 2014-04-23 10:24:29 +02:00
docs docs: document data-isso-id 2018-04-17 07:40:52 +02:00
isso jade: avoid using eval once compiled 2018-04-17 22:54:22 +02:00
share Merge pull request #256 from blatinier/issue-10/admin-interface 2017-11-27 22:55:53 +01:00
.gitignore append Github's .gitignore to .gitignore 2016-09-20 22:05:22 +02:00
.travis.yml drop wheezy testing which is EndOfLife (closes #385) 2018-02-08 22:57:29 +01:00
apidoc.json apidoc settings 2016-06-03 14:54:21 +02:00
CHANGES.rst add changes in CHANGES file to prepare release 2018-02-08 22:38:02 +01:00
CONTRIBUTING.rst write contribute section 2013-12-02 14:26:12 +01:00
CONTRIBUTORS.txt update authors 2016-09-20 22:24:48 +02:00
LICENSE re-license to MIT 2013-09-19 18:44:40 +02:00
Makefile Skip compat module when running flakes checks. 2017-07-29 13:09:48 +00:00
MANIFEST.in Add templates to MANIFEST.in 2017-04-23 13:45:25 +02:00
README.md simplify GH readme to avoid repetition 2014-05-24 16:03:42 +02:00
setup.cfg make universal wheels 2016-01-30 13:03:11 +01:00
setup.py compat.py passes pyflakes test 2018-01-25 15:03:12 +01:00
tox.ini drop wheezy testing which is EndOfLife (closes #385) 2018-02-08 22:57:29 +01:00
uwsgi.ini replace isso module with isso.run 2013-12-16 15:42:43 +01:00
Vagrantfile Add comments for debugging 2015-02-19 16:40:46 +01:00

README.md

Isso – a commenting server similar to Disqus

Isso – Ich schrei sonst – is a lightweight commenting server written in Python and JavaScript. It aims to be a drop-in replacement for Disqus.

Isso in Action

See posativ.org/isso for more details.