lams-github / lams_build / conf / whiteboard

src

Clone Tools

Stats

Commits this week: 0
Total Committers: 2
Last Commit:
Commits this week: 0

Lines of code count not available

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Saturday 01 May 2021
12:12 am

Marcin Cieslak

LDEV-5204 Introduce improved security using hashing

In vanilla Whiteboard a global access token is configured on server and

must be present in all requests made to Whiteboard. It means that anyone

can modify any whiteboard ID (wid).

In LAMS we introduce a hash of wid + accesstoken. Users do not know

access token, so they can not generate the hash for another wid.

The hash is simple Java hashCode() function, sufficient for this

situation.

The hash does not include author name as it is not present in many use

cases.

The hash optionally has a different form: source wid + wid +

accesstoken. It is when copyfromwid parameter is present. In this case

the target canvas is using standard wid and hash, but for the extra call

to source canvas we use source wid and the modified hash. This modified

hash is only usable to copy content from this particular source wid to

this particular target wid, so users can not use the hash to draw on the

source canvas.

Options
    • -1
    • +5
    ./js/main.js
  2. … 9 more files in changeset.
Friday 23 Apr 2021
11:43 pm

Marcin Cieslak

LDEV-5204 Save source canvas data so target canvas is independent clone

Options
    • -7
    • +4
    ./js/main.js
6:49 pm

Marcin Cieslak

LDEV-5204 Put images from source canvas to background to draw over them

Options
    • -1
    • +1
    ./js/main.js
6:06 pm

Marcin Cieslak

LDEV-5204 Allow cloning another canvas to non-empty canvas

Options
    • -0
    • +951
    ./js/main.js