mirror of
https://github.com/aljazceru/CTFd.git
synced 2025-12-17 05:54:19 +01:00
9264e96428
# 3.1.0 / 2020-09-08 **General** - Loosen team password confirmation in team settings to also accept the team captain's password to make it easier to change the team password - Adds the ability to add custom user and team fields for registration/profile settings. - Improve Notifications pubsub events system to use a subscriber per server instead of a subscriber per browser. This should improve the reliability of CTFd at higher load and make it easier to deploy the Notifications system **Admin Panel** - Add a comments functionality for admins to discuss challenges, users, teams, pages - Adds a legal section in Configs where users can add a terms of service and privacy policy - Add a Custom Fields section in Configs where admins can add/edit custom user/team fields - Move user graphs into a modal for Admin Panel **API** - Add `/api/v1/comments` to manipulate and create comments **Themes** - Make scoreboard caching only cache the score table instead of the entire page. This is done by caching the specific template section. Refer to #1586, specifically the changes in `scoreboard.html`. - Add rel=noopener to external links to prevent tab napping attacks - Change the registration page to reference links to Terms of Service and Privacy Policy if specified in configuration **Miscellaneous** - Make team settings modal larger in the core theme - Update tests in Github Actions to properly test under MySQL and Postgres - Make gevent default in serve.py and add a `--disable-gevent` switch in serve.py - Add `tenacity` library for retrying logic - Add `pytest-sugar` for slightly prettier pytest output - Add a `listen()` method to `CTFd.utils.events.EventManager` and `CTFd.utils.events.RedisEventManager`. - This method should implement subscription for a CTFd worker to whatever underlying notification system there is. This should be implemented with gevent or a background thread. - The `subscribe()` method (which used to implement the functionality of the new `listen()` function) now only handles passing notifications from CTFd to the browser. This should also be implemented with gevent or a background thread.
81 lines
2.6 KiB
Python
81 lines
2.6 KiB
Python
from wtforms import BooleanField, SelectField, StringField, TextAreaField
|
|
from wtforms.fields.html5 import IntegerField, URLField
|
|
from wtforms.widgets.html5 import NumberInput
|
|
|
|
from CTFd.forms import BaseForm
|
|
from CTFd.forms.fields import SubmitField
|
|
from CTFd.models import db
|
|
|
|
|
|
class ResetInstanceForm(BaseForm):
|
|
accounts = BooleanField(
|
|
"Accounts",
|
|
description="Deletes all user and team accounts and their associated information",
|
|
)
|
|
submissions = BooleanField(
|
|
"Submissions",
|
|
description="Deletes all records that accounts gained points or took an action",
|
|
)
|
|
challenges = BooleanField(
|
|
"Challenges", description="Deletes all challenges and associated data"
|
|
)
|
|
pages = BooleanField(
|
|
"Pages", description="Deletes all pages and their associated files"
|
|
)
|
|
notifications = BooleanField(
|
|
"Notifications", description="Deletes all notifications"
|
|
)
|
|
submit = SubmitField("Reset CTF")
|
|
|
|
|
|
class AccountSettingsForm(BaseForm):
|
|
domain_whitelist = StringField(
|
|
"Account Email Whitelist",
|
|
description="Comma-seperated email domains which users can register under (e.g. ctfd.io, gmail.com, yahoo.com)",
|
|
)
|
|
team_size = IntegerField(
|
|
widget=NumberInput(min=0), description="Amount of users per team"
|
|
)
|
|
verify_emails = SelectField(
|
|
"Verify Emails",
|
|
description="Control whether users must confirm their email addresses before playing",
|
|
choices=[("true", "Enabled"), ("false", "Disabled")],
|
|
default="false",
|
|
)
|
|
name_changes = SelectField(
|
|
"Name Changes",
|
|
description="Control whether users can change their names",
|
|
choices=[("true", "Enabled"), ("false", "Disabled")],
|
|
default="true",
|
|
)
|
|
|
|
submit = SubmitField("Update")
|
|
|
|
|
|
class ExportCSVForm(BaseForm):
|
|
table = SelectField(
|
|
"Database Table",
|
|
choices=list(
|
|
zip(sorted(db.metadata.tables.keys()), sorted(db.metadata.tables.keys()))
|
|
),
|
|
)
|
|
submit = SubmitField("Download CSV")
|
|
|
|
|
|
class LegalSettingsForm(BaseForm):
|
|
tos_url = URLField(
|
|
"Terms of Service URL",
|
|
description="External URL to a Terms of Service document hosted elsewhere",
|
|
)
|
|
tos_text = TextAreaField(
|
|
"Terms of Service", description="Text shown on the Terms of Service page",
|
|
)
|
|
privacy_url = URLField(
|
|
"Privacy Policy URL",
|
|
description="External URL to a Privacy Policy document hosted elsewhere",
|
|
)
|
|
privacy_text = TextAreaField(
|
|
"Privacy Policy", description="Text shown on the Privacy Policy page",
|
|
)
|
|
submit = SubmitField("Update")
|