Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-4644 Reintroduce an incorrectly deleted CSS file

LDEV-4932 Start using /common/taglibs.jsp in lams_central

    • -10
    • +4
    ./authoring/template/createresult.jsp
    • -5
    • +1
    ./authoring/template/tool/assessmcq.jsp
    • -3
    • +1
    ./authoring/template/tool/assessment.jsp
    • -3
    • +1
    ./authoring/template/tool/assessmentQTI.jsp
    • -3
    • +1
    ./authoring/template/tool/assessoption.jsp
    • -3
    • +1
    ./authoring/template/tool/assessredooption.jsp
    • -3
    • +1
    ./authoring/template/tool/mcoption.jsp
  1. … 54 more files in changeset.
LDEV-4932 Add CSRF to monitor and central

    • -20
    • +31
    ./includes/javascript/orgGroup.js
    • -5
    • +22
    ./includes/javascript/orgGrouping.js
  1. … 46 more files in changeset.
LDEV-4932 Adding CSRF to add lesson

  1. … 2 more files in changeset.
LDEV-4932 Adding CSRF to Author

- Save, Delete, Copy, Move and rename LDs

- Create folder

    • -27
    • +44
    ./includes/javascript/authoring/authoringGeneral.js
  1. … 2 more files in changeset.
Merge branch 'LDEV-4745' into v4.0

# Conflicts:

# lams_admin/conf/language/lams/ApplicationResources.properties

# lams_central/conf/language/lams/ApplicationResources.properties

# lams_central/conf/language/lams/ApplicationResources_en_AU.properties

# lams_central/web/includes/javascript/authoring/authoringGeneral.js

# lams_common/src/java/org/lamsfoundation/lams/util/ConfigurationKeys.java

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/assessmentApplicationContext.xml

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/mcApplicationContext.xml

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/service/McService.java

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/scratchieApplicationContext.xml

    • -13
    • +28
    ./includes/javascript/addLesson.js
  1. … 13 more files in changeset.
LDEV-4932 Add CSRF to OutcomeAuthor tag

  1. … 30 more files in changeset.
LDEV-4932: Adding CSRF to forum and central

CSRF additions to:

- Forum authoring methods

- Adding outcomes to activities in tools (changes to tag and central methods)

  1. … 10 more files in changeset.
LDEV-4932 Adding CSRF to central

Adding CSRF to:

- Lesson dependencies (add/remove)

- Set dates to finish lesson

  1. … 2 more files in changeset.
LDEV-4932 Adding CSRF to central and monitoring

Adding CSRF to:

- Grades on completion

- Enable/disable presence and IM

- Send emails

- Update users into lessons

- Send email notifications

- Delete email notifications

  1. … 10 more files in changeset.
LDEV-4932 Passing CSRF token as a post rather than get

  1. … 40 more files in changeset.
LDEV-4932 Add CSRF to monitor and central

* Add CSRF protection to:

- Change lesson status (incl. remove)

- Remove lesson using main.jsp button

- Rename lesson

* Start using /common/taglibs.jsp in lams_central

  1. … 9 more files in changeset.
LDEV-4932 Add CSRF to central (outcomes)

Adding CSRF protection to:

- Delete outcomes

  1. … 2 more files in changeset.
LDEV-4932 Adding CSRF to admin

Adding CSRF token:

- When adding/editing learning outcomes

- Adding/editing and removing themes

  1. … 4 more files in changeset.
LDEV-4932 Secure edit in monitor with CSRF Guard

  1. … 2 more files in changeset.
LDEV-4932 Secure setting submission deadline with CSRF Guard

  1. … 63 more files in changeset.
LDEV-4932 Remove obsolete form input

LDEV-4932 Use same approach to token injection in all forms

LDEV-4932 Extra comment in web.xml

LDEV-4932 List actions to protect instead of checking everything

  1. … 1 more file in changeset.
Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

    • -70
    • +0
    ./WEB-INF/tlds/security/csrfguard.tld
  1. … 7 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

    • -0
    • +70
    ./WEB-INF/tlds/security/csrfguard.tld
  1. … 7 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

    • -0
    • +70
    ./WEB-INF/tlds/security/csrfguard.tld
  1. … 7 more files in changeset.
LDEV-4931 Adding ids to support Admin tests

  1. … 2 more files in changeset.
LDEV-4930 Avoid displaying excessive user parameters on edit profile jsp

  1. … 3 more files in changeset.
Merge branch 'master' into LDEV-4886

  1. … 1 more file in changeset.
LDEV-4880 Correctly check whether variable is undefined

    • -1
    • +1
    ./includes/javascript/jquery.jqGrid.confidence-level-formattter.js
LDEV-4927 Show other users' answers right after user answers

* Some minor tweaks in monitor pages

  1. … 6 more files in changeset.
LDEV-4887 QTI import done within TBL template

  1. … 3 more files in changeset.
LDEV-4920 Import QTI questions to MCQ after adding them to QB

  1. … 6 more files in changeset.