dbca-utils 2.1.2__tar.gz → 2.1.4__tar.gz

{dbca_utils-2.1.2 → dbca_utils-2.1.4}/PKG-INFO

@@ -1,11 +1,10 @@
 Metadata-Version: 2.4
 Name: dbca-utils
-Version: 2.1.2
+Version: 2.1.4
 Summary: Utilities for DBCA Django apps
 Author-Email: Rocky Chen <rocky.chen@dbca.wa.gov.au>, Ashley Felton <ashley.felton@dbca.wa.gov.au>
 License-Expression: Apache-2.0
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 4.0
 Classifier: Framework :: Django :: 4.2
 Classifier: Framework :: Django :: 5.0
 Classifier: Framework :: Django :: 5.2
@@ -25,26 +24,24 @@ Project-URL: Repository, https://github.com/dbca-wa/dbca-utils.git
 Project-URL: Changelog, https://github.com/dbca-wa/dbca-utils/blob/master/CHANGELOG.md
 Project-URL: GitHub, https://github.com/dbca-wa/dbca-utils
 Requires-Python: <4.0,>=3.10
-Requires-Dist: django<6,>=4
-Requires-Dist: markupsafe==3.0.2
+Requires-Dist: django<6,>=4.2
+Requires-Dist: markupsafe==3.0.3
 Description-Content-Type: text/markdown
 
 # Overview
 
 DBCA Django utility classes and functions.
 
-## Development
+## Requirements
 
-The recommended way to set up this project for development is using
-[uv](https://docs.astral.sh/uv/)
-to install and manage a Python virtual environment.
-With uv installed, install the required Python version (see `pyproject.toml`). Example:
+- Python 3.10 or later
+- Django 4.2 or later
 
-    uv python install 3.12
+## Development
 
-Change into the project directory and run:
+Dependencies for this project are managed using [uv](https://docs.astral.sh/uv/).
+With uv installed, change into the project directory and run:
 
-    uv python pin 3.12
     uv sync
 
 Activate the virtualenv like so:
@@ -71,7 +68,7 @@ using the same tool if you require:
 
 ## Installation
 
-1. Install via pip/etc.: `pip install dbca-utils`
+1. Install via uv/pip/etc.: `pip install dbca-utils`
 
 ## SSO Login Middleware
 

{dbca_utils-2.1.2 → dbca_utils-2.1.4}/README.md

@@ -2,18 +2,16 @@
 
 DBCA Django utility classes and functions.
 
-## Development
+## Requirements
 
-The recommended way to set up this project for development is using
-[uv](https://docs.astral.sh/uv/)
-to install and manage a Python virtual environment.
-With uv installed, install the required Python version (see `pyproject.toml`). Example:
+- Python 3.10 or later
+- Django 4.2 or later
 
-    uv python install 3.12
+## Development
 
-Change into the project directory and run:
+Dependencies for this project are managed using [uv](https://docs.astral.sh/uv/).
+With uv installed, change into the project directory and run:
 
-    uv python pin 3.12
     uv sync
 
 Activate the virtualenv like so:
@@ -40,7 +38,7 @@ using the same tool if you require:
 
 ## Installation
 
-1. Install via pip/etc.: `pip install dbca-utils`
+1. Install via uv/pip/etc.: `pip install dbca-utils`
 
 ## SSO Login Middleware
 

{dbca_utils-2.1.2 → dbca_utils-2.1.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "dbca-utils"
-version = "2.1.2"
+version = "2.1.4"
 description = "Utilities for DBCA Django apps"
 authors = [
     { name = "Rocky Chen", email = "rocky.chen@dbca.wa.gov.au" },
@@ -10,7 +10,6 @@ readme = "README.md"
 license = "Apache-2.0"
 classifiers = [
     "Framework :: Django",
-    "Framework :: Django :: 4.0",
     "Framework :: Django :: 4.2",
     "Framework :: Django :: 5.0",
     "Framework :: Django :: 5.2",
@@ -28,8 +27,8 @@ classifiers = [
 ]
 requires-python = ">=3.10,<4.0"
 dependencies = [
-    "django>=4,<6",
-    "markupsafe==3.0.2",
+    "django>=4.2,<6",
+    "markupsafe==3.0.3",
 ]
 
 [project.urls]
@@ -40,10 +39,10 @@ GitHub = "https://github.com/dbca-wa/dbca-utils"
 
 [dependency-groups]
 dev = [
-    "pytest-django>=4.11.0",
-    "pytest-sugar>=1.0.0",
-    "tox>=4.25.0",
-    "tox-uv>=1.25.0",
+    "pytest-django>=4.11.1",
+    "pytest-sugar>=1.1.1",
+    "tox>=4.31.0",
+    "tox-uv>=1.29.0",
 ]
 
 [build-system]

{dbca_utils-2.1.2 → dbca_utils-2.1.4}/src/dbca_utils/middleware.py

@@ -5,6 +5,7 @@ from django.contrib.auth.middleware import AuthenticationMiddleware, get_user
 from django.utils import timezone
 from django.utils.deprecation import MiddlewareMixin
 from django.utils.functional import SimpleLazyObject
+from django.utils.html import strip_tags
 from markupsafe import escape
 
 from dbca_utils.utils import env
@@ -135,8 +136,10 @@ class SSOLoginMiddleware(MiddlewareMixin):
             # Sanitise first_name and last_name values, because end-users have control over these
             # values and could conceivably inject malicious values into them (e.g. a XSS attack).
             if "first_name" in attributemap:
+                attributemap["first_name"] = strip_tags(attributemap["first_name"])
                 attributemap["first_name"] = str(escape(attributemap["first_name"]))
             if "last_name" in attributemap:
+                attributemap["last_name"] = strip_tags(attributemap["first_name"])
                 attributemap["last_name"] = str(escape(attributemap["last_name"]))
 
             # Optional setting: projects may define accepted user email domains either as