ThrawnCA

Possible logic error: UselessSubclassMethod.differentAttributes

1

There's some logic in `UselessSubclassMethod.differentAttributes` that doesn't make sense. It checks whether the exception declarations for two methods are the same, returning false if they aren't, but then it unconditionally...

FP: XXE_DOCUMENT does not detect secure processing flag in static initializer

1

We have a `DocumentBuilderFactory` configured with the 'secure processing' flag in a static initializer, then used in instance methods. Unfortunately the `XXE_DOCUMENT` detector doesn't see the configuration and thinks the...

### Proposed fixes: Fix import that causes problems on Python 3.

CKAN 2.9 is not compatible with Python 3.9, should be documented

4

**CKAN version** 2.9 **Describe the bug** CKAN 2.9 relies on Markdown 2.6.7, which is incompatible with Python 3.9 (see https://github.com/Python-Markdown/markdown/issues/953). This should be documented at http://docs.ckan.org/en/2.9/maintaining/installing/install-from-source.html **Steps to reproduce** -...

Document the interactions of multiple plugins overriding the same template

3

- ckan_extends extends the next plugin instead of the default - New nested blocks can be defined for use by child templates in other plugins - Plugin ordering is very...

Page visibility is cached beyond login/logout

21

**CKAN version** 2.9 **Describe the bug** Accessing a restricted page such as a private dataset will cache the page; returning to that page will initially show the cached version even...

**CKAN version** 2.9 **Describe the bug** If fields are removed from the configuration schema, eg by plugins implementing `IConfigurer`, the corresponding UI is still visible at `/ckan-admin/config` but is broken....

Robots.txt can no longer be easily customised

4

**CKAN version** 2.9 **Describe the bug** `robots.txt` was moved back to the `public` directory as part of #4801. However, this reverts the implementation of https://github.com/ckan/ideas-and-roadmap/issues/178 and makes it harder to...

skip updating package 'metadata_modified' when only updating resources

2

This includes the resource_update API and the package_resource_reorder API. Fixes #6829 ### Features: - [ ] includes tests covering changes - [ ] includes updated documentation - [ ] includes...

add functions to IUploader interface to assist extensions, #5617

4

- ckanext-archiver needs file metadata, and remote storage like ckanext-s3filestore means it's not available directly from disk - Deleting a resource should delete the uploaded file Fixes #5617 ### Features:...