Psiturk

Latest version: v3.3.1

Safety actively analyzes 619647 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 5

3.3.1

Fixed
- Bumped pyOpenSSL to 22.0.0 to fix a problem with its `cryptography` package requirement.

3.3.0

Added
- Separate config settings for mturk qualifications for `live` and `sandbox` modes (505)
- Added configuration option for changing autogenerated dashboard-related tables to be unique per experiment -- for use when a single database is shared across multiple experiments (495)

Updated
- Facelift for dashboard

Fixed
- Fix backwards-compat bug for assignments-table (528) -- Thanks jacob-lee!

3.2.2

Fixed
- Pin markupsafe to 2.0.1 (541) -- Thanks for the report jmuchovej

3.2.1

Fixed
- Fix SSTI vulnerability in ad and consent pages (517)

3.2.0

Not secure
Added
- Add custom MTurk qualification support (493)
- /dashboard/campaigns and /dashboard/tasks now warn if `do_scheduler` is `False` (502)
- amt_services_wrapper's _get_local_hitids no longer queries the Participants table for hitids.
Instead, it wholly relies on the Hit table (`amt_hits` by default). (498) -- Thanks evankirkiles!

Experiments that are migrating from psiturk v2 should run the new `psiturk migrate db` command
when migrating to this release.

Fixed
- user_utils.PsiTurkAuthorization should not allow empty username or password! (492)
- aws env vars AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are now preferred over anything
set in a config file somewhere (496, 500)
- Dashboard will refuse to start if `secret_key` is missing or if no valid mturk credentials (497)
- Scheduler is started "paused" if `do_scheduler` is `False`, so that tasks can still be
created, modified, and destroyed (502)
- Campaigns' "update goal" functionality fixed -- the associated task is updated with
the new goal (502)
- example template for thanks-mturksubmit was missing a call to `{{ super() }}`, leading to
no styles being loaded by default (503)


Changed
- Migrate from Travis CI to Github Actions (500)
- API now uses a custom error handler to pass sometimes-gory exception messages back to the api user (502)
- Change the Participant.datastring column to be lazy-loaded, causing the datastring to not be loaded by the
sqlalchemy model until explicitly requested. Leads to massive speed increases for any query involving the
Participant table for cases where the datastring is large. (Thanks evankirkiles!)(504)

3.1.0

Not secure
Added
- ability to launch the experiment server from a subdirectory instead of just
the default directory by passing `app_dir` keyword argument to `experiment_server.launch()` (484)

Fixed
- Flask's StreamLogger is now used by default when ON_CLOUD=1, assuming no errorlog
is set in the config file (483)
- fix download_datafiles scoping error (487)

Page 1 of 5

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.