Commit graph

592 commits

Author SHA1 Message Date
github-actions[bot]
957c92690e
docs(README.md): contrib-readme-action has updated readme 2026-09-06 07:04:37 +00:00
mauvehed
0216d60c40
Merge pull request #351 from restincode/ci/validate-people-json
Some checks failed
Validate memorial data / validate (push) Failing after 42s
ci: validate memorial json against schema and site conventions
2026-09-05 15:04:51 -05:00
mauvehed
20690fb188
ci(validate): skip convention checks on schema-invalid data
Schema errors were reported but the cross-file checks still walked the
data as if it were well-formed, so a null list entry or a null item in
socialmedialinks crashed with an AttributeError and hid every other
error. Treat schema validation as a gate: report and skip the file.

Also skip the 'not listed in peoplelist.json' check when peoplelist.json
itself fails the schema, so the root cause is not buried.
2026-09-05 14:39:57 -05:00
mauvehed
7491bf1ce1
ci(validate): compare image paths case-sensitively
The is_file() check passed on macOS for /images/bill.jpg because the
filesystem is case-insensitive, while GitHub Pages and the Actions runner
are not. Match against the actual images/ listing instead.
2026-09-05 14:34:42 -05:00
mauvehed
8594a4c682
fix(people): match image filename case for bill
Bill.jpg is capitalized on disk; the JSON referenced bill.jpg, which 404s
on the live site.
2026-09-05 14:34:41 -05:00
mauvehed
b9d239665f
fix(people): correct https typo in template placeholder url 2026-09-05 10:28:47 -05:00
mauvehed
657082e940
ci: validate memorial json against schema and site conventions
Add schema/person.schema.json and scripts/validate_people.py, run via a
pre-commit hook and a GitHub Actions job on pull requests. Checks:

- people/*.json match the schema (keys, types, item shapes)
- every peoplelist.json entry has a file and every file is listed once
- filenames are lowercase alphanumeric (two legacy names grandfathered)
- local image paths exist under images/
- link fields are http(s) with no surrounding whitespace
- text-only fields contain no HTML; maintext stays raw HTML by design

Warns (non-fatal) on gallery items with no title, which the page uses as
alt text. Adds a pip dependabot entry for scripts/requirements.txt.
2026-09-05 10:25:02 -05:00
mauvehed
22faf47e83
fix(people): correct image path, stray whitespace, and placeholder url
- barnabyjack: gallery image is Barnaby_Jack3.jpg, not .png (404 on site)
- bradsmith, bruceesquibel: strip leading spaces from contribution urls
- larrytesler: drop template placeholder url (htps://www.cyberz.tech/)

Found by the new validator in scripts/validate_people.py.
2026-09-05 10:25:01 -05:00
mauvehed
389112fff5
Merge pull request #341 from richardnixondev/fix-xss-render-sanitization
fix(memorial): sanitize remaining XSS-prone render paths
2026-09-03 11:56:52 -05:00
mauvehed
9aed7b8506
Merge branch 'main' into fix-xss-render-sanitization 2026-09-02 22:12:32 -05:00
mauvehed
a05da39cbc
Merge pull request #349 from restincode/dependabot/bundler/json-2.19.9 2026-08-27 07:24:59 -05:00
dependabot[bot]
35856d78fc
chore(deps): bump json from 2.20.0 to 2.21.2
Bumps [json](https://github.com/ruby/json) from 2.20.0 to 2.21.2.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](https://github.com/ruby/json/compare/v2.20.0...v2.21.2)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-27 12:17:41 +00:00
mauvehed
af71486dc2
Merge pull request #347 from restincode/dependabot/bundler/concurrent-ruby-1.3.7 2026-08-27 07:13:55 -05:00
mauvehed
638650b211
Merge pull request #346 from restincode/dependabot/bundler/faraday-2.14.3 2026-08-27 07:13:32 -05:00
mauvehed
dca6d38a0a
Merge pull request #345 from restincode/dependabot/bundler/nokogiri-1.19.4 2026-08-27 07:13:14 -05:00
dependabot[bot]
45321bf151
chore(deps): bump concurrent-ruby from 1.3.6 to 1.3.7
Bumps [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.6...v1.3.7)

---
updated-dependencies:
- dependency-name: concurrent-ruby
  dependency-version: 1.3.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-24 00:00:24 +00:00
dependabot[bot]
b4710fd581
chore(deps): bump faraday from 2.14.2 to 2.14.3
Bumps [faraday](https://github.com/lostisland/faraday) from 2.14.2 to 2.14.3.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lostisland/faraday/compare/v2.14.2...v2.14.3)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-23 16:29:12 +00:00
dependabot[bot]
4aaf7d054d
chore(deps): bump nokogiri from 1.19.3 to 1.19.4
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.3 to 1.19.4.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.19.3...v1.19.4)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-23 14:45:28 +00:00
Rob Fuller
adadbbebc6
Merge pull request #343 from restincode/contributors-readme-action-8mB3etFU7g
docs(contributor): contributors readme action update
2026-05-24 12:17:48 -04:00
github-actions[bot]
524e202f85
docs(README.md): contrib-readme-action has updated readme 2026-05-24 06:09:04 +00:00
Rob Fuller
8a480b9bee
Merge pull request #340 from richardnixondev/fix-kelvinwhite-data-consistency
fix(data): normalize kelvinwhite.json to match repo conventions
2026-05-21 23:51:20 -04:00
Rob Fuller
4ef3a8849b
Merge branch 'main' into fix-kelvinwhite-data-consistency 2026-05-21 23:50:28 -04:00
Rob Fuller
1cbb5764c1
Merge pull request #334 from restincode/dependabot/bundler/addressable-2.9.0
chore(deps): bump addressable from 2.8.8 to 2.9.0
2026-05-18 13:54:00 -04:00
Rob Fuller
a1ce9ad445
Merge pull request #335 from restincode/dependabot/bundler/nokogiri-1.19.3
chore(deps): bump nokogiri from 1.19.1 to 1.19.3
2026-05-18 13:50:54 -04:00
Rob Fuller
e504fb9da0
Merge pull request #338 from restincode/dependabot/bundler/faraday-2.14.2
chore(deps): bump faraday from 2.14.1 to 2.14.2
2026-05-18 13:50:29 -04:00
dependabot[bot]
8c46bf9b1e
chore(deps): bump faraday from 2.14.1 to 2.14.2
Bumps [faraday](https://github.com/lostisland/faraday) from 2.14.1 to 2.14.2.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lostisland/faraday/compare/v2.14.1...v2.14.2)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 15:17:52 +00:00
24f541919e fix(data): normalize kelvinwhite.json to match repo conventions
- Gallery image URLs now use leading `/` like the other 97 entries
- maintext wrapped in <p> to match the formatting of other bios
2026-05-17 16:16:49 +01:00
cbbecc27c6 fix(memorial): sanitize remaining XSS-prone render paths
The references fix in #331 covered only one of the render paths.
Apply the same DOM-construction pattern to personal info, obituary,
social media, contributions, gallery and the help-link fallbacks,
plus the people grid in index.html.

maintext is still rendered as HTML to preserve existing formatted
bios; flagged for a DOMPurify follow-up.
2026-05-17 16:08:45 +01:00
dependabot[bot]
a14163e64f
chore(deps): bump nokogiri from 1.19.1 to 1.19.3
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.1 to 1.19.3.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.19.1...v1.19.3)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-08 14:24:32 +00:00
dependabot[bot]
e42e0e26a6
chore(deps): bump addressable from 2.8.8 to 2.9.0
Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.8.8 to 2.9.0.
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.8...addressable-2.9.0)

---
updated-dependencies:
- dependency-name: addressable
  dependency-version: 2.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 08:58:40 +00:00
mauvehed
209f85206c
Merge pull request #331 from restincode/add-references-section
Add references section to memorial pages
2026-03-15 16:42:20 -05:00
mauvehed
0c4853d88d fix(memorial): sanitize references titles and fallback URL against XSS
Use jQuery DOM construction ($("<a>").attr().text()) instead of string
concatenation for reference links, preventing HTML injection from
untrusted title values. Pass fallback issue URL through safeUrl().
2026-03-15 16:39:03 -05:00
mauvehed
eef5719567 feat: add references section to memorial pages
Add a new "References" sidebar section for memorial tweets, obituaries,
news articles, tribute videos, and other external links about the
deceased. Populate references for 14 profiles with 30 entries that were
previously incorrectly placed in gallery (which is photos-only).
2026-03-15 16:22:09 -05:00
mauvehed
78b5c8e255
Merge pull request #330 from restincode/fix-minor-data-issues
fix(data): minor fixes and gallery cleanup across 15 person files
2026-03-15 14:03:04 -05:00
mauvehed
2986b40359 fix(data): remove non-image URLs from Eric Chavez gallery 2026-03-15 14:00:18 -05:00
mauvehed
f4e2c0ab02 fix(data): remove non-image URLs from gallery fields
Gallery is for photos only. Removed tweet URLs, article links, video
links, reddit threads, and other non-image content from gallery arrays
across 13 person files. These references will be re-added when a
dedicated References section is implemented.
2026-03-15 13:57:05 -05:00
mauvehed
131914f552 fix(data): add missing handles, date specificity, and reference links
- Barnaby Jack: add TodayInInfoSec tweet to contributions
- Nolan Berry: add handle "d3vnull42", specify death date (9 Nov 2018)
- Maxx Redwine: specify birth (24 Jun 1964) and death (31 Jan 2011)
- Chip Meadows: add 2 memorial tweets to contributions
- Scott Sard: add wife's memorial tweet to contributions
2026-03-15 13:57:05 -05:00
mauvehed
a61b1061e6
Merge pull request #329 from restincode/fix-empty-maintext
fix(data): add missing maintext bios for 5 memorial entries
2026-03-15 12:27:28 -05:00
mauvehed
040bc34ad4 fix(data): add missing maintext bios for 5 memorial entries
- John Horton Conway: full bio covering Cambridge/Princeton career,
  Game of Life, surreal numbers, group theory, COVID-19 death
- Michael Assante: full bio covering ICS/SCADA security career, NERC,
  Idaho National Lab, ICS Cyber Kill Chain, GICSP, lymphoma
- Aaron Testerman: minimal bio from available data
- Eric Chavez: minimal bio, added memorial tweets to gallery
- Conor Fahey-Latrope: minimal bio noting BitTorrent employment
2026-03-15 12:26:12 -05:00
mauvehed
f2e99961b8
Merge pull request #328 from restincode/fix-missing-urls-data
fix(data): add missing URLs and data from issue comments
2026-03-15 12:25:44 -05:00
mauvehed
f840eb7586
Merge pull request #327 from restincode/fix-missing-photos
fix(data): add missing photos for 3 memorial entries
2026-03-15 12:25:24 -05:00
mauvehed
15d8fa4008
Merge branch 'main' into fix-missing-photos 2026-03-15 12:24:31 -05:00
mauvehed
1d26ce6dd9
Merge pull request #326 from restincode/fix-critical-data-errors
fix(data): correct critical data errors in 3 memorial entries
2026-03-15 12:24:07 -05:00
mauvehed
07561931b3 fix(data): add missing URLs, links, and data from issue comments
- Kelly Lum: add SummerCon memorial tweet/video, Dark Reading, Fox5 links
- Jaime Cochran: add Twitter handle, MuckRock FOIA, Reddit, BlogTalkRadio
- Aaron Swartz: add Wikipedia, MuckRock FOIA links
- Christian Wright: add SecLists posting, GoFundMe memorial
- Dan Kaminsky: add NYT obituary, Slashdot, The Parallax, talks list
- Michael Hawley: fix missing leading slashes on image paths, add NYT
  obituary and MIT Media Lab memorial
- Glenn Eccard: add 3 memorial tweets from issue
- Chris Hurley: add Security Tribe and Goon Band to affiliations
- Ben Byer: add fail0verflow memorial blog post
- Bruce Esquibel: add textfiles and DethVeggie memorial tweets
- Geoffrey Bennett: add TICOM affiliation, DOJ letter contribution
2026-03-15 11:51:34 -05:00
mauvehed
8bdd258fd1 fix(data): add missing photos for Joe Rogers, Robert Ashby, Vijay Gill
- Joe Rogers: add 2 photos from issue #19 (provided by his widow),
  set main image
- Robert Ashby: add photo from hackerphotos.com (issue #13)
- Vijay Gill: add obituary photo and gallery photo (issue #232),
  set main image
2026-03-15 11:09:20 -05:00
mauvehed
3ea0805555 fix(data): correct critical data errors in 3 memorial entries
- Don Blumenthal: fix wrong birth/death dates and contributions copied
  from Matthew D Smith, rewrite bio from CircleID obituary
- Ben Preston: replace lorem ipsum placeholder with real bio text
- Deven Fore: point mainimage to existing photo instead of silhouette
2026-03-15 11:01:00 -05:00
mauvehed
a54ddc34a9
Merge pull request #325 from restincode/fix-len-sassaman
Fix broken Len Sassaman photo and add missing data from issues #6 and #172
2026-03-15 10:46:50 -05:00
mauvehed
ad726d4817 fix(people): fix broken Len Sassaman photo and add missing data
- Replace missing main photo with high-res image from issue #172
- Add handle (rabbi), affiliations (Shmoo Group)
- Add Twitter, website, blog archive, MuckRock FOIA links
- Add 4 contributions (key-signing protocol, CodeCon, Mixmaster, Satoshi article)
- Add 5 gallery photos from issue #6 comments
2026-03-15 10:45:38 -05:00
mauvehed
eee77fa279
Merge pull request #324 from restincode/add-lyger-photo
Add photo for Kelly Todd (Lyger)
2026-03-15 10:31:32 -05:00
mauvehed
26bac12ee4 feat(people): add photo for Kelly Todd (Lyger) 2026-03-15 10:30:32 -05:00