OWASP-BLT · razzasid · May 23, 2025 · Jul 1, 2025 · Jul 1, 2025 · Jul 1, 2025
diff --git a/.github/copilot/agent.yaml b/.github/copilot/agent.yaml
diff --git a/blt/middleware/ip_restrict.py b/blt/middleware/ip_restrict.py
@@ -1,5 +1,4 @@
 import ipaddress
-import logging
 
 from django.core.cache import cache
 from django.db import models, transaction
@@ -9,12 +8,10 @@
 
 MAX_COUNT = 2147483647
 
-logger = logging.getLogger(__name__)
-
 
 class IPRestrictMiddleware:
     """
-    Middleware to restrict access based on client IP addresses and user agent.
+    Middleware to restrict access based on client IP addresses and user agents.
     """
 
     def __init__(self, get_response):
@@ -48,8 +45,8 @@ def blocked_ip_network(self):
             try:
                 network = ipaddress.ip_network(range_str, strict=False)
                 blocked_ip_network.append(network)
-            except ValueError as e:
-                logger.error(f"Invalid IP network {range_str}: {str(e)}")
+            except ValueError:
+                # Log the error or handle it as needed, but skip invalid networks
                 continue
 
         return blocked_ip_network
@@ -73,12 +70,7 @@ def ip_in_range(self, ip, blocked_ip_network):
         """
         Check if the IP address is within any of the blocked IP networks.
         """
-        try:
-            ip_obj = ipaddress.ip_address(ip)
-        except ValueError as e:
-            logger.error(f"Invalid IP address {ip}: {str(e)}")
-            return False
-
+        ip_obj = ipaddress.ip_address(ip)
-        ip_obj = ipaddress.ip_address(ip)
+        try:
+            ip_obj = ipaddress.ip_address(ip)
+        except ValueError:
+            # Invalid IP address, cannot be in any blocked range
+            return False
-        ip_obj = ipaddress.ip_address(ip)
+        try:
+            ip_obj = ipaddress.ip_address(ip)
+        except ValueError:
+            # Invalid IP address, cannot be in any blocked range
+            return False
         return any(ip_obj in ip_range for ip_range in blocked_ip_network)
 
     def is_user_agent_blocked(self, user_agent, blocked_agents):

diff --git a/website/static/css/custom-scrollbar.css b/website/static/css/custom-scrollbar.css
@@ -0,0 +1,20 @@
+/* Custom scrollbar for WebKit browsers */
+.scrollbar-hide::-webkit-scrollbar {
+  width: 8px;
+}
+.scrollbar-hide::-webkit-scrollbar-track {
+  background: transparent;
+}
+.scrollbar-hide::-webkit-scrollbar-thumb {
+  background-color: rgba(156, 163, 175, 0.5);
+  border-radius: 4px;
+}
+.scrollbar-hide::-webkit-scrollbar-thumb:hover {
+  background-color: rgba(156, 163, 175, 0.7);
+}
+.dark .scrollbar-hide::-webkit-scrollbar-thumb {
+  background-color: rgba(107, 114, 128, 0.5);
+}
+.dark .scrollbar-hide::-webkit-scrollbar-thumb:hover {
+  background-color: rgba(107, 114, 128, 0.7);
+}
diff --git a/website/static/js/darkMode.js b/website/static/js/darkMode.js
@@ -0,0 +1,29 @@
+document.addEventListener("DOMContentLoaded", () => {
+  const htmlElement = document.documentElement;
+
+  // Use event delegation to handle clicks on the theme toggle button,
+  // wherever it may be in the DOM.
+  document.addEventListener("click", (event) => {
+    const toggleButton = event.target.closest("#theme-toggle");
+    if (toggleButton) {
+        const isDark = htmlElement.classList.toggle("dark");
+        const newTheme = isDark ? "dark" : "light";
+
+        // Save user preference
+        localStorage.setItem("theme", newTheme);
+
+        // Send theme preference to server if CSRF token is available
+        const csrfToken = document.querySelector("[name=csrfmiddlewaretoken]")?.value;
+        if (csrfToken) {
+          fetch("/set-theme/", {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "X-CSRFToken": csrfToken,
+            },
+            body: JSON.stringify({ theme: newTheme }),
+          }).catch(error => console.error("Error saving theme preference:", error));
+        }
+    }
+  });
+});
diff --git a/website/static/js/messages.js b/website/static/js/messages.js