website/TODO.md

# To-do

* rate limiting to prevent abuse - especially on POST requests
* consider removing `events` and `worldmap` modules
* ask Denver about why so many license files


# Done

* ensure appropriate caching headers are used
* remove `internalNavigate`
* add tests for main pages returning 200
* move `SITE_FUNDGOAL` configuration to `settings.py`
* move `sponsors.py` and `sponsors.html` into `supporters` app
* use `<detail>` elements for supporter page hidden sections, rather than
  complex jQuery
* remove jQuery
* split the template/content files out from `conservancy/static` into their own
  `content` directory (avoid mixing static and non-static content)
* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and
  HTTPS redirect is done by Apache
* standardise settings to replace `settings.py` and `djangocommonsettings.py`
  with `settings/prod.py` and move `SECRET_KEY` to an environment variable
* migrate to Django 4.2 LTS
* review `apache2` directory - may be unused
* add deployment script that runs migrations and collects static files
* switch `ParameterValidator` to use `SECRET_KEY` if possible to minimize
  non-standard settings
* install staticfiles app
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00			`# To-do`

Add CAPTCHA to FOSSY track proposals form 2024-11-12 14:15:13 +11:00			`* rate limiting to prevent abuse - especially on POST requests`
Note to-dos 2024-03-22 11:24:29 +11:00			* consider removing `events` and `worldmap` modules
Delegate management of canonical URLs to Apache This middleware is mostly redundant: * redirecting to canonical URLs can be done more simply in Apache * appending a forward slash is a default in CommonMiddleware now * we're no longer using Squid cache May need to update Apache to strip/redirect trailing "index.html". 2024-03-20 14:54:54 +11:00			`* ask Denver about why so many license files`
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00

			`# Done`

Update to-dos 2024-05-13 18:18:40 +10:00			`* ensure appropriate caching headers are used`
Eliminate base_standard.html template and internalNavigate blocks The base_standard.html template was an unnecessary level of template inheritance. Also removed unused `min` and `subtract` template tags. 2024-05-13 17:11:01 +10:00			* remove `internalNavigate`
Add some basic 200 OK smoke tests for key pages 2024-05-10 12:12:04 +10:00			`* add tests for main pages returning 200`
Move `SITE_FUNDGOAL` configuration to settings/base.py This changes more often than the surrounding code, so should live with the other configuration. 2024-05-10 12:00:44 +10:00			* move `SITE_FUNDGOAL` configuration to `settings.py`
Merge sponsors.py into supporters app, frontpage.py into views.py Just a small structural change so that the related functionality is grouped together. 2024-05-10 11:27:51 +10:00			* move `sponsors.py` and `sponsors.html` into `supporters` app
Remove remaining jQuery This avoids every page on the site parsing 250KB of JavaScript. supporter-page.js isn't the most elegant code, but at least it's a little more modular now and no longer user jQuery. 2024-05-09 22:12:35 +10:00			* use `<detail>` elements for supporter page hidden sections, rather than
			`complex jQuery`
			`* remove jQuery`
Begin jQuery removal 2024-05-07 10:46:34 +10:00			* split the template/content files out from `conservancy/static` into their own
			`content` directory (avoid mixing static and non-static content)
Handle trailing slashes in static content 2024-03-20 15:45:46 +11:00			* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and
			`HTTPS redirect is done by Apache`
Switch settings to use "the one true way" approach The advantage of this approach is that the production and dev configurations are in version control, so there's less opportunity for surprises. As advocated by Jacob Kaplan-Moss (OSCON 2011) and Two Scoops of Django book. 2024-03-20 13:29:37 +11:00			* standardise settings to replace `settings.py` and `djangocommonsettings.py`
			with `settings/prod.py` and move `SECRET_KEY` to an environment variable
Upgrade to Django 4.2 LTS 2024-03-19 22:14:20 +11:00			`* migrate to Django 4.2 LTS`
Tidy-ups 2024-03-18 17:59:56 +11:00			* review `apache2` directory - may be unused
			`* add deployment script that runs migrations and collects static files`
Update to-dos 2023-10-26 13:24:17 +11:00			* switch `ParameterValidator` to use `SECRET_KEY` if possible to minimize
			`non-standard settings`
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00			`* install staticfiles app`