CVS commit: pkgsrc/www/py-postorius

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu May  7 20:50:31 UTC 2026

Modified Files:
        pkgsrc/www/py-postorius: Makefile distinfo
Added Files:
        pkgsrc/www/py-postorius/patches:
            patch-src_postorius_static_postorius_js_held__messages.js

Log Message:
py-postorius: Apply an upstream security bug fix.

Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/py-postorius/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/py-postorius/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/py-postorius/patches/patch-src_postorius_static_postorius_js_held__messages.js

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-postorius/Makefile
diff -u pkgsrc/www/py-postorius/Makefile:1.5 pkgsrc/www/py-postorius/Makefile:1.6
--- pkgsrc/www/py-postorius/Makefile:1.5        Wed Feb 12 09:29:19 2025
+++ pkgsrc/www/py-postorius/Makefile    Thu May  7 20:50:31 2026
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.5 2025/02/12 09:29:19 adam Exp $
+# $NetBSD: Makefile,v 1.6 2026/05/07 20:50:31 wiz Exp $
 
 DISTNAME=      postorius-1.3.13
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
+PKGREVISION=   1
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/postorius/}
 
@@ -20,5 +21,8 @@ DEPENDS+=     ${PYPKGPREFIX}-cmarkgfm>=0.8.0
 
 USE_LANGUAGES= # none
 
+post-install:
+       ${RM} -f ${DESTDIR}${PREFIX}/${PYSITELIB}/postorius/static/postorius/js/held_messages.js.orig
+
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/www/py-postorius/distinfo
diff -u pkgsrc/www/py-postorius/distinfo:1.3 pkgsrc/www/py-postorius/distinfo:1.4
--- pkgsrc/www/py-postorius/distinfo:1.3        Wed Feb 12 09:29:19 2025
+++ pkgsrc/www/py-postorius/distinfo    Thu May  7 20:50:31 2026
@@ -1,5 +1,6 @@
-$NetBSD: distinfo,v 1.3 2025/02/12 09:29:19 adam Exp $
+$NetBSD: distinfo,v 1.4 2026/05/07 20:50:31 wiz Exp $
 
 BLAKE2s (postorius-1.3.13.tar.gz) = 112b8008515941c5a00cdf861213dfafe8bcf590458f0a5a21c5a2defc19619c
 SHA512 (postorius-1.3.13.tar.gz) = 088bb578f9d33d38252b9e9cf578d5d2e8920cb67e73b7ae040dc30097d3a294e660f445419a681888820b01c16a940fe375c53a28344bb3e024a614e411a2ac
 Size (postorius-1.3.13.tar.gz) = 3508385 bytes
+SHA1 (patch-src_postorius_static_postorius_js_held__messages.js) = 69b3aa62e89b240a58970e6767f173045fdc607f

Added files:

Index: pkgsrc/www/py-postorius/patches/patch-src_postorius_static_postorius_js_held__messages.js
diff -u /dev/null pkgsrc/www/py-postorius/patches/patch-src_postorius_static_postorius_js_held__messages.js:1.1
--- /dev/null   Thu May  7 20:50:31 2026
+++ pkgsrc/www/py-postorius/patches/patch-src_postorius_static_postorius_js_held__messages.js   Thu May  7 20:50:31 2026
@@ -0,0 +1,15 @@
+$NetBSD: patch-src_postorius_static_postorius_js_held__messages.js,v 1.1 2026/05/07 20:50:31 wiz Exp $
+
+https://gitlab.com/mailman/postorius/-/commit/c4706abd05ba6bcf472fc674b160d3a9d6a4868b
+
+--- src/postorius/static/postorius/js/held_messages.js.orig    2023-01-04 06:22:36.459728000 +0000
++++ src/postorius/static/postorius/js/held_messages.js
+@@ -9,7 +9,7 @@ var loadjs = function(rest_url, error_message) {
+       url: rest_url + msgid,
+       success: function(data) {
+         $('#message-source-btn').attr('href', rest_url + msgid + '?raw')
+-        $('#message-title').html(data.subject);
++        $('#message-title').text(data.subject);
+         $('.modal-footer form input[name="msgid"]').attr('value', msgid);
+         if (data.msg.body) {
+           $('#held-message-content').text(data.msg.body);