Create your own GitHub profile
Sign up for your own profile on GitHub, the best place to host code, manage projects, and build software alongside 50 million developers.
Sign up-
JSK @ Stanford
- San Francisco, CA
- Sign in to view email
- https://simonwillison.net/
Pinned
4,580 contributions in the last year
Activity overview
Contribution activity
June 2020
- simonw/datasette-auth-tokens Python
- simonw/xeus-sqlite C++
- simonw/datasette-permissions-sql Python
-
simonw/asgi-auth-github
Python
•
Built by
Created a pull request in simonw/datasette that received 9 comments
New WIP writable canned queries
Refs #698. Replaces #703
Still todo:
Unit tests
Figure out
Flash message solution
.json modeCSRF protection
Better error message display on er…
+263
−22
•
9
comments
Created an issue in simonw/datasette that received 20 comments
"flash messages" mechanism
Passing ?_success like this isn't necessarily the best approach. Potential improvements include:
Signing this message so it can't be tampered wit…
20
comments
- {"$file": ...} mechanism is broken
- Plugin $env secrets mechanism doesn't work inside lists
- actor_matches_allow fails to consider all keys
- Mechanism for skipping CSRF checks on API posts
- Plugin idea: on_startup
- /-/metadata and so on should respect view-instance permission
- Having view-table permission but NOT view-database should still grant access to /db/table
- It would be more intuitive if "allow": none meant "no-one can do this"
- Redesign register_facet_classes plugin hook
- Ability to set ds_actor cookie such that it expires
- Horizontal scrollbar on changelog page on mobile
- Document CSRF protection (for plugins)
- Document the ds_actor signed cookie
- Way to enable a default=False permission for anonymous users
- Example authentication plugin
- Documentation is inconsistent about "id" as required field on actor
- request.url_vars helper property
- Add Response class to internals documentation
- Idea: Plugin hook for registering canned queries
- Example permissions plugin
- Drop resource_type from permission_allowed system
- Come up with a new example for extra_template_vars plugin
- Group permission checks by request on /-/permissions debug page
- Remove --debug option from datasette serve
- Mechanism for specifying allow_sql permission in metadata.json
- Some issues not shown.
7
contributions
in private repositories
Jun 1 – Jun 10