Henryk Plötz

Escape the output in U2F admin settings screen

3

Currently no escaping is done when outputting (the only) user-supplied data, leading to a trivial XSS vulnerability (albeit with limited impact). To test, try entering something like ``` http://foo'>Foo ```...

Allow setting a custom tailscale API URL

3

New optional parameter for `Tailscale()`: `api_url`, same as `--login-server` for the `tailscale` CLI client. # Proposed Changes This change will allow setting a custom API URL for the tailscale control...

Change dummy queryset qualifier from "all" to "none"

1

As is, django-filter is not compatible with [django-scopes](https://github.com/raphaelm/django-scopes). Django-scopes is an additional guardrail which prevents accidental data exposure. It replaces the default manager of a model with a specialized manager...