LDEV-4932 removing multipart encodingThere are plenty of form we set the multipart encoding for uploading files, but no files are uploaded. This has implications for CSRF tokens. So we remove the enctype="multipart/form-data" for all the authoring forms that aren't needed.
LDEV-4932: Adding CSRF to forum and centralCSRF additions to:- Forum authoring methods- Adding outcomes to activities in tools (changes to tag and central methods)
LDEV-4932 Adding CSRF to central and monitoringAdding CSRF to:- Grades on completion- Enable/disable presence and IM- Send emails- Update users into lessons- Send email notifications- Delete email notifications
LDEV-4932 Adding CSRF to AdminAdding it to:- User roles- Create course- Clone lessons- assign roles in courses- global roles- change password for course- change user pass- delete all lessons
LDEV-4932 Add CSRF to monitor and central* Add CSRF protection to:- Change lesson status (incl. remove)- Remove lesson using main.jsp button- Rename lesson* Start using /common/taglibs.jsp in lams_central
LDEV-4932 Secure gradebook calls with CSRF Guard* Secure the following gradebook calls in particular: - Release marks - Any change in marks - Export* Add taglibs.jsp to gradebook project
LDEV-4932 Secure gradebook calls with CSRF Guard* Secure the following gradebook calls in particular: - Release marks - Any change in marks - Export* Add taglibs.jsp to gradebook project