From 741f0183e6dda33b7458cc1e897c0a2397c07196 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Thu, 16 Mar 2017 22:43:43 +0000
Subject: [PATCH 01/13] Prevent ldap injections in autocompletion views

We only allow alphanumeric characters in the query in order to avoid
injections
---
 gestioncof/autocomplete.py | 34 ++++++++++++++++++----------------
 kfet/autocomplete.py       | 34 ++++++++++++++++++----------------
 2 files changed, 36 insertions(+), 32 deletions(-)

diff --git a/gestioncof/autocomplete.py b/gestioncof/autocomplete.py
index 1eae6920..65f62fab 100644
--- a/gestioncof/autocomplete.py
+++ b/gestioncof/autocomplete.py
@@ -56,22 +56,24 @@ def autocomplete(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join(
-            ['(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(**{"bit": bit})
-             for bit in bits]
-        ))
-        with Connection(settings.LDAP_SERVER_URL) as conn:
-            conn.search(
-                'dc=spi,dc=ens,dc=fr', ldap_query,
-                attributes=['uid', 'cn']
-            )
-            queries['clippers'] = conn.entries
-        # Clearing redundancies
-        queries['clippers'] = [
-            Clipper(clipper.uid, clipper.cn)
-            for clipper in queries['clippers']
-            if str(clipper.uid) not in usernames
-        ]
+        ldap_query = '(|{:s})'.format(''.join([
+            '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=bit)
+            for bit in bits if bit.isalnum()
+        ]))
+        if ldap_query != "(|)":
+            # If none of the bits were legal, we do not perform the query
+            with Connection(settings.LDAP_SERVER_URL) as conn:
+                conn.search(
+                    'dc=spi,dc=ens,dc=fr', ldap_query,
+                    attributes=['uid', 'cn']
+                )
+                queries['clippers'] = conn.entries
+            # Clearing redundancies
+            queries['clippers'] = [
+                Clipper(clipper.uid, clipper.cn)
+                for clipper in queries['clippers']
+                if str(clipper.uid) not in usernames
+            ]
 
     # Resulting data
     data.update(queries)
diff --git a/kfet/autocomplete.py b/kfet/autocomplete.py
index 64fa52cf..3b5e0ab5 100644
--- a/kfet/autocomplete.py
+++ b/kfet/autocomplete.py
@@ -75,22 +75,24 @@ def account_create(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join(
-            ['(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=word)
-             for word in search_words]
-        ))
-        with Connection(settings.LDAP_SERVER_URL) as conn:
-            conn.search(
-                'dc=spi,dc=ens,dc=fr', ldap_query,
-                attributes=['uid', 'cn']
-            )
-            queries['clippers'] = conn.entries
-        # Clearing redundancies
-        queries['clippers'] = [
-            Clipper(clipper.uid, clipper.cn)
-            for clipper in queries['clippers']
-            if str(clipper.uid) not in usernames
-        ]
+        ldap_query = '(|{:s})'.format(''.join([
+            '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=word)
+            for word in search_words if word.isalnum()
+        ]))
+        if ldap_query != "(|)":
+            # If none of the bits were legal, we do not perform the query
+            with Connection(settings.LDAP_SERVER_URL) as conn:
+                conn.search(
+                    'dc=spi,dc=ens,dc=fr', ldap_query,
+                    attributes=['uid', 'cn']
+                )
+                queries['clippers'] = conn.entries
+            # Clearing redundancies
+            queries['clippers'] = [
+                Clipper(clipper.uid, clipper.cn)
+                for clipper in queries['clippers']
+                if str(clipper.uid) not in usernames
+            ]
 
     # Resulting data
     data.update(queries)

From 55b67f38c8a4e61ddf7e51a4e851ed23e2a4204b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Thu, 16 Mar 2017 23:16:56 +0000
Subject: [PATCH 02/13] =?UTF-8?q?Notice=20the=20users=20about=20the=20?=
 =?UTF-8?q?=CE=B1-numeric=20restriction?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add a help text above the two autocompletion inputs letting the users
know that non-alphanumeric characters will not be used.
---
 gestioncof/static/css/cof.css           | 9 ++++++++-
 gestioncof/templates/registration.html  | 5 +++--
 kfet/static/kfet/css/index.css          | 4 ++++
 kfet/templates/kfet/account_create.html | 1 +
 4 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/gestioncof/static/css/cof.css b/gestioncof/static/css/cof.css
index 269736d0..fda55d98 100644
--- a/gestioncof/static/css/cof.css
+++ b/gestioncof/static/css/cof.css
@@ -800,7 +800,7 @@ input#search_autocomplete {
  height: 40px;
  padding: 10px 8px;
  margin: 0 auto;
- margin-top: 20px;
+ margin-top: 0px;
  display: block;
  color: #aaa;
 }
@@ -1119,3 +1119,10 @@ div.messages div.alert-success div.container {
 div.messages div.alert div.container a {
     color: inherit;
 }
+
+/* Help text */
+
+p.help-block {
+  margin: 5px auto;
+  width: 90%;
+}
diff --git a/gestioncof/templates/registration.html b/gestioncof/templates/registration.html
index 769808de..d6914f64 100644
--- a/gestioncof/templates/registration.html
+++ b/gestioncof/templates/registration.html
@@ -9,7 +9,9 @@
 
 {% block realcontent %}
     <h2>Inscription d'un nouveau membre</h2>
-    <input type="text" name="q" id="search_autocomplete" spellcheck="false" />
+    <p class="help-block">Les mots contentant des caractères non alphanumériques seront ignorés</p>
+    <input type="text" name="q" id="search_autocomplete" spellcheck="false"
+           placeholder="Chercher un utilisateur par nom, prénom ou identifiant clipper" />
     <div id="form-placeholder"></div>
     <div class="yourlabs-autocomplete"></div>
     <script type="text/javascript">
@@ -20,7 +22,6 @@
                 minimumCharacters: 3,
                 id: 'search_autocomplete',
                 choiceSelector: 'li:has(a)',
-                placeholder: "Chercher un utilisateur par nom, prénom ou identifiant clipper",
                 box: $(".yourlabs-autocomplete"),
             });
             $('input#search_autocomplete').bind(
diff --git a/kfet/static/kfet/css/index.css b/kfet/static/kfet/css/index.css
index f3e9bf8c..ce6c5be7 100644
--- a/kfet/static/kfet/css/index.css
+++ b/kfet/static/kfet/css/index.css
@@ -341,3 +341,7 @@ textarea {
 .help h4 {
     margin:15px 0;
 }
+
+.help-block {
+    padding-top: 15px;
+}
diff --git a/kfet/templates/kfet/account_create.html b/kfet/templates/kfet/account_create.html
index ac6c5daa..9c5b09a5 100644
--- a/kfet/templates/kfet/account_create.html
+++ b/kfet/templates/kfet/account_create.html
@@ -23,6 +23,7 @@
           {{ trigramme_form.trigramme }}
         </div>
         <div id="trigramme_valid"></div>
+        <p class="help-block">Les mots contentant des caractères non alphanumériques seront ignorés</p>
         <input type="text" name="q" id="search_autocomplete" spellcheck="false" placeholder="Chercher un utilisateur par nom, prénom ou identifiant clipper" class="form-control">
         <div style="position:relative;">
           <div id="search_results"></div>

From f512c1bdd742ca2c1f4cbdd9899ad6ae1e7021b0 Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Sat, 18 Mar 2017 18:02:23 -0300
Subject: [PATCH 03/13] Add better checkout creation

---
 kfet/management/commands/loadkfetdevdata.py | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/kfet/management/commands/loadkfetdevdata.py b/kfet/management/commands/loadkfetdevdata.py
index 5b3e9913..328a50a4 100644
--- a/kfet/management/commands/loadkfetdevdata.py
+++ b/kfet/management/commands/loadkfetdevdata.py
@@ -12,7 +12,8 @@ from django.contrib.auth.models import User, Group, Permission, ContentType
 
 from gestioncof.management.base import MyBaseCommand
 from gestioncof.models import CofProfile
-from kfet.models import Account, Article, OperationGroup, Operation, Checkout
+from kfet.models import Account, Article, OperationGroup, Operation,\
+                        Checkout, CheckoutStatement
 
 # Où sont stockés les fichiers json
 DATA_DIR = os.path.join(os.path.dirname(os.path.dirname(__file__)),
@@ -96,13 +97,25 @@ class Command(MyBaseCommand):
         # Caisse
         # ---
 
-        checkout, _ = Checkout.objects.get_or_create(
+        checkout, created = Checkout.objects.get_or_create(
             created_by=Account.objects.get(trigramme='000'),
             name='Chaudron',
-            valid_from=timezone.now(),
-            valid_to=timezone.now() + timedelta(days=365)
+            defaults={
+                'valid_from': timezone.now(),
+                'valid_to': timezone.now() + timedelta(days=730)
+            },
         )
 
+        if created:
+            CheckoutStatement.objects.create(
+                by=Account.objects.get(trigramme='000'),
+                checkout=checkout,
+                balance_old=0,
+                balance_new=0,
+                amount_taken=0,
+                amount_error=0
+            )
+
         # ---
         # Opérations
         # ---

From 29d7654052740fa0d41c6d1942d5b9011233d52f Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Sat, 18 Mar 2017 18:02:33 -0300
Subject: [PATCH 04/13] Root kfet account

---
 kfet/management/commands/loadkfetdevdata.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kfet/management/commands/loadkfetdevdata.py b/kfet/management/commands/loadkfetdevdata.py
index 328a50a4..8fa974df 100644
--- a/kfet/management/commands/loadkfetdevdata.py
+++ b/kfet/management/commands/loadkfetdevdata.py
@@ -93,6 +93,14 @@ class Command(MyBaseCommand):
         liq_account, _ = Account.objects.get_or_create(cofprofile=liq_profile,
                                                        trigramme='LIQ')
 
+        # Root account if existing
+
+        root_profile = CofProfile.objects.filter(user__username='root')
+        if root_profile.exists():
+            root_profile = root_profile.get()
+            Account.objects.get_or_create(cofprofile=root_profile,
+                                          trigramme='AAA')
+
         # ---
         # Caisse
         # ---

From 47b7d934e05acd6fb3a762d000a1c5c00d54b578 Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Sat, 18 Mar 2017 19:01:51 -0300
Subject: [PATCH 05/13] PEP8 on imports

---
 kfet/management/commands/loadkfetdevdata.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kfet/management/commands/loadkfetdevdata.py b/kfet/management/commands/loadkfetdevdata.py
index 8fa974df..b1ed6726 100644
--- a/kfet/management/commands/loadkfetdevdata.py
+++ b/kfet/management/commands/loadkfetdevdata.py
@@ -12,8 +12,8 @@ from django.contrib.auth.models import User, Group, Permission, ContentType
 
 from gestioncof.management.base import MyBaseCommand
 from gestioncof.models import CofProfile
-from kfet.models import Account, Article, OperationGroup, Operation,\
-                        Checkout, CheckoutStatement
+from kfet.models import (Account, Article, OperationGroup, Operation,
+                         Checkout, CheckoutStatement)
 
 # Où sont stockés les fichiers json
 DATA_DIR = os.path.join(os.path.dirname(os.path.dirname(__file__)),

From 51fba4da21b6247faf2e345ca4e62d1a63f78679 Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Sat, 18 Mar 2017 19:02:08 -0300
Subject: [PATCH 06/13] Log messages

---
 kfet/management/commands/loadkfetdevdata.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kfet/management/commands/loadkfetdevdata.py b/kfet/management/commands/loadkfetdevdata.py
index b1ed6726..705f6f27 100644
--- a/kfet/management/commands/loadkfetdevdata.py
+++ b/kfet/management/commands/loadkfetdevdata.py
@@ -88,6 +88,7 @@ class Command(MyBaseCommand):
 
         # Compte liquide
 
+        self.stdout.write("Création du compte liquide")
         liq_user, _ = User.objects.get_or_create(username='liquide')
         liq_profile, _ = CofProfile.objects.get_or_create(user=liq_user)
         liq_account, _ = Account.objects.get_or_create(cofprofile=liq_profile,
@@ -97,6 +98,7 @@ class Command(MyBaseCommand):
 
         root_profile = CofProfile.objects.filter(user__username='root')
         if root_profile.exists():
+            self.stdout.write("Création du compte K-Fêt root")
             root_profile = root_profile.get()
             Account.objects.get_or_create(cofprofile=root_profile,
                                           trigramme='AAA')

From 4899bba1f78168b78ad6e353eb2d6f08ef87577e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Sun, 19 Mar 2017 14:05:25 +0000
Subject: [PATCH 07/13] Replace list comprehensions by iterators in dal

---
 gestioncof/autocomplete.py | 4 ++--
 kfet/autocomplete.py       | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/gestioncof/autocomplete.py b/gestioncof/autocomplete.py
index 65f62fab..7caea48b 100644
--- a/gestioncof/autocomplete.py
+++ b/gestioncof/autocomplete.py
@@ -56,10 +56,10 @@ def autocomplete(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join([
+        ldap_query = '(|{:s})'.format(''.join(
             '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=bit)
             for bit in bits if bit.isalnum()
-        ]))
+        ))
         if ldap_query != "(|)":
             # If none of the bits were legal, we do not perform the query
             with Connection(settings.LDAP_SERVER_URL) as conn:
diff --git a/kfet/autocomplete.py b/kfet/autocomplete.py
index 3b5e0ab5..d8582ccb 100644
--- a/kfet/autocomplete.py
+++ b/kfet/autocomplete.py
@@ -75,10 +75,10 @@ def account_create(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join([
+        ldap_query = '(|{:s})'.format(''.join(
             '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=word)
             for word in search_words if word.isalnum()
-        ]))
+        ))
         if ldap_query != "(|)":
             # If none of the bits were legal, we do not perform the query
             with Connection(settings.LDAP_SERVER_URL) as conn:

From dc50a23b1045fcddd3dd486c7d43f9402ccb4b6c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Sun, 19 Mar 2017 14:48:04 +0000
Subject: [PATCH 08/13] Escape the content of the regex in `highligh_text`

---
 gestioncof/templatetags/utils.py | 2 +-
 kfet/templatetags/kfet_tags.py   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/gestioncof/templatetags/utils.py b/gestioncof/templatetags/utils.py
index 90855165..76bc6003 100644
--- a/gestioncof/templatetags/utils.py
+++ b/gestioncof/templatetags/utils.py
@@ -23,7 +23,7 @@ def key(d, key_name):
 
 
 def highlight_text(text, q):
-    q2 = "|".join(q.split())
+    q2 = "|".join(re.escape(word) for word in q.split())
     pattern = re.compile(r"(?P<filter>%s)" % q2, re.IGNORECASE)
     return mark_safe(re.sub(pattern,
                             r"<span class='highlight'>\g<filter></span>",
diff --git a/kfet/templatetags/kfet_tags.py b/kfet/templatetags/kfet_tags.py
index b3976326..c8b6a228 100644
--- a/kfet/templatetags/kfet_tags.py
+++ b/kfet/templatetags/kfet_tags.py
@@ -11,7 +11,7 @@ register = template.Library()
 
 
 def highlight_text(text, q):
-    q2 = "|".join(q.split())
+    q2 = "|".join(re.escape(word) for word in q.split())
     pattern = re.compile(r"(?P<filter>%s)" % q2, re.IGNORECASE)
     regex = r"<span class='highlight_autocomplete'>\g<filter></span>"
     return mark_safe(re.sub(pattern, regex, text))

From 74f0b63e9641504b25c1c865a12fdee6d3fb0ce1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Sun, 19 Mar 2017 15:06:41 +0000
Subject: [PATCH 09/13] Change ldap query behaviour if multiple inputs

It is now consistent with the other lookups over the User database
---
 gestioncof/autocomplete.py | 4 ++--
 kfet/autocomplete.py       | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/gestioncof/autocomplete.py b/gestioncof/autocomplete.py
index 7caea48b..1146e1c0 100644
--- a/gestioncof/autocomplete.py
+++ b/gestioncof/autocomplete.py
@@ -56,8 +56,8 @@ def autocomplete(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join(
-            '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=bit)
+        ldap_query = '(&{:s})'.format(''.join(
+            '(|(cn=*{bit:s}*)(uid=*{bit:s}*))'.format(bit=bit)
             for bit in bits if bit.isalnum()
         ))
         if ldap_query != "(|)":
diff --git a/kfet/autocomplete.py b/kfet/autocomplete.py
index d8582ccb..2dd3c32f 100644
--- a/kfet/autocomplete.py
+++ b/kfet/autocomplete.py
@@ -75,8 +75,8 @@ def account_create(request):
     # Fetching data from the SPI
     if hasattr(settings, 'LDAP_SERVER_URL'):
         # Fetching
-        ldap_query = '(|{:s})'.format(''.join(
-            '(cn=*{bit:s}*)(uid=*{bit:s}*)'.format(bit=word)
+        ldap_query = '(&{:s})'.format(''.join(
+            '(|(cn=*{bit:s}*)(uid=*{bit:s}*))'.format(bit=word)
             for word in search_words if word.isalnum()
         ))
         if ldap_query != "(|)":

From 2c63e6b6676f3ca49907493297b4fd77d53eb44c Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Mon, 20 Mar 2017 00:11:50 -0300
Subject: [PATCH 10/13] Use django.contrib.auth decorators

---
 gestioncof/decorators.py | 8 +-------
 kfet/decorators.py       | 5 +----
 2 files changed, 2 insertions(+), 11 deletions(-)

diff --git a/gestioncof/decorators.py b/gestioncof/decorators.py
index d7e70608..86bb2ff2 100644
--- a/gestioncof/decorators.py
+++ b/gestioncof/decorators.py
@@ -1,10 +1,6 @@
 # -*- coding: utf-8 -*-
 
-from __future__ import division
-from __future__ import print_function
-from __future__ import unicode_literals
-
-from django_cas_ng.decorators import user_passes_test
+from django.contrib.auth.decorators import user_passes_test
 
 
 def is_cof(user):
@@ -15,8 +11,6 @@ def is_cof(user):
         return False
 
 cof_required = user_passes_test(lambda u: is_cof(u))
-cof_required_customdenied = user_passes_test(lambda u: is_cof(u),
-                                             login_url="cof-denied")
 
 
 def is_buro(user):
diff --git a/kfet/decorators.py b/kfet/decorators.py
index 9af9247f..46c41495 100644
--- a/kfet/decorators.py
+++ b/kfet/decorators.py
@@ -1,10 +1,7 @@
 # -*- coding: utf-8 -*-
 
-from __future__ import (absolute_import, division,
-                        print_function, unicode_literals)
-from builtins import *
+from django.contrib.auth.decorators import user_passes_test
 
-from django_cas_ng.decorators import user_passes_test
 
 def kfet_is_team(user):
     return user.has_perm('kfet.is_team')

From 0aed975615f9f5869223742f2c11287b13a02129 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Mon, 20 Mar 2017 08:14:20 +0000
Subject: [PATCH 11/13] Fix the empty-query test in autocomplete

If there is no valid word to search in the LDAP database, no query is
performed. Since 74f0b63e, that behaviour was broken because of a typo
---
 gestioncof/autocomplete.py | 2 +-
 kfet/autocomplete.py       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/gestioncof/autocomplete.py b/gestioncof/autocomplete.py
index 1146e1c0..a9abbad7 100644
--- a/gestioncof/autocomplete.py
+++ b/gestioncof/autocomplete.py
@@ -60,7 +60,7 @@ def autocomplete(request):
             '(|(cn=*{bit:s}*)(uid=*{bit:s}*))'.format(bit=bit)
             for bit in bits if bit.isalnum()
         ))
-        if ldap_query != "(|)":
+        if ldap_query != "(&)":
             # If none of the bits were legal, we do not perform the query
             with Connection(settings.LDAP_SERVER_URL) as conn:
                 conn.search(
diff --git a/kfet/autocomplete.py b/kfet/autocomplete.py
index 2dd3c32f..c0019bf9 100644
--- a/kfet/autocomplete.py
+++ b/kfet/autocomplete.py
@@ -79,7 +79,7 @@ def account_create(request):
             '(|(cn=*{bit:s}*)(uid=*{bit:s}*))'.format(bit=word)
             for word in search_words if word.isalnum()
         ))
-        if ldap_query != "(|)":
+        if ldap_query != "(&)":
             # If none of the bits were legal, we do not perform the query
             with Connection(settings.LDAP_SERVER_URL) as conn:
                 conn.search(

From 59f57793babf718004b78821d9651626aaa43c6f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <martin.pepin@ens.fr>
Date: Mon, 20 Mar 2017 22:05:48 +0000
Subject: [PATCH 12/13] typo

---
 gestioncof/templates/registration.html  | 2 +-
 kfet/templates/kfet/account_create.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/gestioncof/templates/registration.html b/gestioncof/templates/registration.html
index d6914f64..8f05dfb0 100644
--- a/gestioncof/templates/registration.html
+++ b/gestioncof/templates/registration.html
@@ -9,7 +9,7 @@
 
 {% block realcontent %}
     <h2>Inscription d'un nouveau membre</h2>
-    <p class="help-block">Les mots contentant des caractères non alphanumériques seront ignorés</p>
+    <p class="help-block">Les mots contenant des caractères non alphanumériques seront ignorés</p>
     <input type="text" name="q" id="search_autocomplete" spellcheck="false"
            placeholder="Chercher un utilisateur par nom, prénom ou identifiant clipper" />
     <div id="form-placeholder"></div>
diff --git a/kfet/templates/kfet/account_create.html b/kfet/templates/kfet/account_create.html
index 9c5b09a5..3b4829d8 100644
--- a/kfet/templates/kfet/account_create.html
+++ b/kfet/templates/kfet/account_create.html
@@ -23,7 +23,7 @@
           {{ trigramme_form.trigramme }}
         </div>
         <div id="trigramme_valid"></div>
-        <p class="help-block">Les mots contentant des caractères non alphanumériques seront ignorés</p>
+        <p class="help-block">Les mots contenant des caractères non alphanumériques seront ignorés</p>
         <input type="text" name="q" id="search_autocomplete" spellcheck="false" placeholder="Chercher un utilisateur par nom, prénom ou identifiant clipper" class="form-control">
         <div style="position:relative;">
           <div id="search_results"></div>

From 5e802217fd1171f2bd72357f1285f83c7566e2d1 Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <ludovic.stephan@ens.fr>
Date: Mon, 20 Mar 2017 20:24:44 -0300
Subject: [PATCH 13/13] Remove lambda operators

---
 gestioncof/decorators.py | 4 ++--
 kfet/decorators.py       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/gestioncof/decorators.py b/gestioncof/decorators.py
index 86bb2ff2..a1263ce3 100644
--- a/gestioncof/decorators.py
+++ b/gestioncof/decorators.py
@@ -10,7 +10,7 @@ def is_cof(user):
     except:
         return False
 
-cof_required = user_passes_test(lambda u: is_cof(u))
+cof_required = user_passes_test(is_cof)
 
 
 def is_buro(user):
@@ -20,4 +20,4 @@ def is_buro(user):
     except:
         return False
 
-buro_required = user_passes_test(lambda u: is_buro(u))
+buro_required = user_passes_test(is_buro)
diff --git a/kfet/decorators.py b/kfet/decorators.py
index 46c41495..0c8a1a76 100644
--- a/kfet/decorators.py
+++ b/kfet/decorators.py
@@ -6,4 +6,4 @@ from django.contrib.auth.decorators import user_passes_test
 def kfet_is_team(user):
     return user.has_perm('kfet.is_team')
 
-teamkfet_required = user_passes_test(lambda u: kfet_is_team(u))
+teamkfet_required = user_passes_test(kfet_is_team)