Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#32431 closed Cleanup/optimization (fixed)

Consider listing the history of security issues in reverse chronological order

Reported by: Jaap Roes Owned by: Hasan Ramezani
Component: Documentation Version: dev
Severity: Normal Keywords:
Cc: Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: yes UI/UX: no

Description

Because of the recent CVE fix I was searching Google for "django cve" which brought me to ​https://docs.djangoproject.com/en/3.1/releases/security/.

This is a super helpful page, except that the most recently fixed (an therefore most relevant) security issues are listed all the way at the bottom of the page. I would expect them to be at the top of the page.

Change History (8)

comment:1 by Carlton Gibson, 4 years ago

Easy pickings: set
Triage Stage: Unreviewed β†’ Accepted

Hey Jaap, OK yes, I guess :) (I've half thought this myself at times so...)

(Probably out of scope but: I wonder if some Sphinx extension would let us have a sprinkle of JS to adjust the order dynamically? πŸ€”)

Last edited 4 years ago by Carlton Gibson (previous) (diff)

comment:2 by Hasan Ramezani, 4 years ago

Owner: changed from nobody to Hasan Ramezani
Status: new β†’ assigned

comment:3 by Jaap Roes, 4 years ago

I just noticed the footer on that page links to the release notes of Django 0.95. I guess this is automatically added by Sphinx, but it is somewhat strange as well. Would moving the ​Security releases section on ​https://docs.djangoproject.com/en/3.1/releases/ to the top "fix" that link? It would also make the security release page slightly more discoverable.

comment:4 by Hasan Ramezani, 4 years ago

Has patch: set

I've created a ​PR and moved Issues under Django's security process to the top and Issues prior to Django's security process to the bottom.
Also, I used a small python script to reverse the order of entries.

Jaap

I just noticed the footer on that page links to the release notes of Django 0.95. I guess this is automatically added by Sphinx

Yes, it's added by Sphinx.

Would moving the ​Security releases section on ​​https://docs.djangoproject.com/en/3.1/releases/ to the top "fix" that link?

Yes, By this change, the release index page will be the previous page of the Security Issues page.

Carlton, Shall we go for this change as well?

comment:5 by Carlton Gibson, 4 years ago

I don't think we should move the Security Releases section to the top.

The vast majority of our users are looking for the latest release, by series, be they security or not, and not the list of security issues.
That 0.95 is the previous page in the docs is just how it is (for me) β€” not a biggie.

comment:6 by Carlton Gibson, 4 years ago

Triage Stage: Accepted β†’ Ready for checkin

comment:7 by Carlton Gibson <carlton@…>, 4 years ago

Resolution: β†’ fixed
Status: assigned β†’ closed

In 17a5e2cf:

Fixed #32431 -- Reversed order of security issues history.

comment:8 by Carlton Gibson <carlton.gibson@…>, 4 years ago

In dd14e63:

[3.2.x] Fixed #32431 -- Reversed order of security issues history.

Backport of 17a5e2cff606305fd819a024cf9f450f90202a6f from master

Note: See TracTickets for help on using tickets.
Back to Top