lams-github

Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Merge remote-tracking branch 'origin/master' into develop

LDEV-4743 Squash tool patches updating to version 3.1

  1. … 104 more files in changeset.
LDEV-4743 Squash core patches updating to version 3.1

  1. … 38 more files in changeset.
Merge tag 'v3.0'

Freeze 3.0 version

LDEV-4743 Squash core patches updating to version 3.0

  1. … 64 more files in changeset.
LDEV-4743 Squash patches updating to version 2.4

LDEV-4743 Rename patch to keep naming convention

LDEV-4932 Add CSRF to Vote and share resources authoring

    • -2
    • +3
    /lams_tool_larsrc/web/pages/authoring/basic.jsp
LDEV-4745 Adding missing labels to QB

LDEV-4932 Add CSRF to OutcomeAuthor tag

  1. … 16 more files in changeset.
LDEV-4932 removing multipart encoding

There are plenty of form we set the multipart encoding for uploading files, but no files are uploaded. This has implications for CSRF tokens. So we remove the enctype="multipart/form-data" for all the authoring forms that aren't needed.

    • -1
    • +1
    /lams_tool_nb/web/authoring/authoring.jsp
LDEV-4932: Adding CSRF to forum and central

CSRF additions to:

- Forum authoring methods

- Adding outcomes to activities in tools (changes to tag and central methods)

    • -2
    • +2
    /lams_tool_forum/web/jsps/authoring/basic.jsp
LDEV-4932 Adding CSRF to central

Adding CSRF to:

- Lesson dependencies (add/remove)

- Set dates to finish lesson

    • -9
    • +13
    /lams_central/web/indexLessonConditions.jsp
LDEV-4932 Adding CSRF to central and monitoring

Adding CSRF to:

- Grades on completion

- Enable/disable presence and IM

- Send emails

- Update users into lessons

- Send email notifications

- Delete email notifications

LDEV-4932 Passing CSRF token as a post rather than get

    • -1
    • +1
    /lams_admin/web/policies/editPolicy.jsp
    • -1
    • +1
    /lams_admin/web/signupmanagement/add.jsp
    • -1
    • +1
    /lams_admin/web/timezoneManagement.jsp
    • -2
    • +2
    /lams_central/web/outcome/outcomeEdit.jsp
    • -3
    • +3
    /lams_central/web/profile/editprofile.jsp
  1. … 27 more files in changeset.
LDEV-4932 fix checkbox toggle issue

LDEV-4932 Adding CSRF to Admin

Adding it to:

- User roles

- Create course

- Clone lessons

- assign roles in courses

- global roles

- change password for course

- change user pass

- delete all lessons

    • -1
    • +1
    /lams_admin/web/policies/editPolicy.jsp
  1. … 9 more files in changeset.
LDEV-4932 Add CSRF to monitor and central

* Add CSRF protection to:

- Change lesson status (incl. remove)

- Remove lesson using main.jsp button

- Rename lesson

* Start using /common/taglibs.jsp in lams_central

    • -7
    • +1
    /lams_central/web/authoringConfirm.jsp
    • -0
    • +8
    /lams_central/web/common/taglibs.jsp
    • -5
    • +1
    /lams_central/web/favoriteOrganisations.jsp
    • -8
    • +2
    /lams_central/web/outcome/outcomeEdit.jsp
  1. … 9 more files in changeset.
LDEV-4932 Add CSRF to central (outcomes)

Adding CSRF protection to:

- Delete outcomes

LDEV-4932 Add CSRF for admin

- Adding CSRF to delete preview lessons

    • -1
    • +1
    /lams_admin/web/cleanupPreviewLessons.jsp
LDEV-4932 Adding CSRF protection to admin

- Adding user add/edit/remove/disable

LDEV-4932 Secure gradebook calls with CSRF Guard

* Secure the following gradebook calls in particular:

- Release marks

- Any change in marks

- Export

* Add taglibs.jsp to gradebook project

    • -0
    • +70
    /lams_gradebook/web/WEB-INF/tlds/security/csrfguard.tld
LDEV-4932 Secure gradebook calls with CSRF Guard

* Secure the following gradebook calls in particular:

- Release marks

- Any change in marks

- Export

* Add taglibs.jsp to gradebook project

    • -0
    • +15
    /lams_gradebook/web/WEB-INF/web.xml
    • -0
    • +8
    /lams_gradebook/web/common/taglibs.jsp
    • -5
    • +1
    /lams_gradebook/web/gradebookCourseLearner.jsp
    • -15
    • +10
    /lams_gradebook/web/gradebookCourseMonitor.jsp
    • -40
    • +51
    /lams_gradebook/web/gradebookMonitor.jsp
LDEV-4932 Secure save tool authoring with CSRF Guard

  1. … 28 more files in changeset.
Merge remote-tracking branch 'origin/develop' into LDEV-4745

Conflicts:

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/IScratchieService.java

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java

Merge remote-tracking branch 'origin/master' into develop

Merge branch 'LDEV-4936'

LDEV-4936 Fix layout for tool groups in sysadmin

    • -5
    • +0
    /lams_admin/web/css/learningLibraryGroup.scss
LDEV-4932 Adding CSRF admin

Adding CSRF to delete session management

LDEV-4932 Adding CSRF to admin

Adding CSRF token:

- When adding/editing learning outcomes

- Adding/editing and removing themes

    • -3
    • +4
    /lams_central/web/outcome/outcomeEdit.jsp