fix: escape and batch the fixed packages rendering in the vulnerabilities tab #179 by tdruez · Pull Request #610 · aboutcode-org/dejacode

tdruez · 2026-11-03T14:05:25Z

Issues

Escape the fixed package PURLs from VulnerableCode in the package vulnerabilities tab, using format_html instead of an f-string with mark_safe
URL-encode the package_url parameter of the "Add Package" link, so PURLs with several qualifiers are no longer truncated at the first &
Fetch the fixed packages with a single query for the whole tab, instead of one query per PURL and per vulnerability
Load only the fields needed for rendering with only_rendering_fields
Add PackageQuerySet.for_package_urls, matching the PURLs with the same rules as for_package_url
Add tests for HTML escaping, multi-qualifier PURLs, query co

…ties tab Signed-off-by: tdruez <tdruez@aboutcode.org>

tdruez added 2 commits November 3, 2026 17:48

fix: escape and batch the fixed packages rendering in the vulnerabili…

b4bae31

…ties tab Signed-off-by: tdruez <tdruez@aboutcode.org>

fix: escape and batch the fixed packages rendering in the vulnerabili…

de94958

…ties tab Signed-off-by: tdruez <tdruez@aboutcode.org>

tdruez changed the title ~~179 fixed packages html~~ fix: escape and batch the fixed packages rendering in the vulnerabilities tab #179 Nov 4, 2026

tdruez merged commit 25d36a6 into main Nov 4, 2026
8 checks passed

tdruez deleted the 179-fixed-packages-html branch November 4, 2026 09:28