lams-github / lams_central

web

Clone Tools

Stats

Commits this week: 0
Total Committers: 31
Last Commit:
Commits this week: 0

Lines of code count not available

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Tuesday 14 Jan 2020
10:43 am

Marcin Cieslak

LDEV-4941 Prevent "stealing" a QB question

Prevent changing an existing question's collection if it is not in one

of user's own collections

Options
    • -1
    • +2
    ./qb/authoring/addQuestionFooter.jsp
  2. … 7 more files in changeset.
Thursday 09 Jan 2020
11:10 pm

Andrey Balan

LDEV-4932 Add CSRF to QB bank calls

Options
    • -12
    • +9
    ./authoring/template/tbl/tbl.jsp
    • -0
    • +1
    ./qb/authoring/addVsa.jsp
    • -0
    • +1
    ./qb/authoring/addessay.jsp
    • -0
    • +1
    ./qb/authoring/addmarkhedging.jsp
    • -0
    • +1
    ./qb/authoring/addmatchingpairs.jsp
    • -0
    • +1
    ./qb/authoring/addmultiplechoice.jsp
    • -0
    • +1
    ./qb/authoring/addnumerical.jsp
    • -0
    • +1
    ./qb/authoring/addordering.jsp
    • -0
    • +1
    ./qb/authoring/addtruefalse.jsp
    • -0
    • +2
    ./qb/authoring/matchingpairoption.jsp
    • -0
    • +2
    ./qb/authoring/numericaloption.jsp
    • -0
    • +2
    ./qb/authoring/option.jsp
    • -0
    • +2
    ./qb/authoring/optionhedgingmark.jsp
    • -0
    • +2
    ./qb/authoring/orderingoption.jsp
    • -0
    • +2
    ./qb/authoring/vsaOption.jsp
  16. … 18 more files in changeset.
8:59 am

Andrey Balan

Merge branch 'master' into v4.0

# Conflicts:

# lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_build/build.xml

# lams_build/liblist.txt

# lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java

# lams_central/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_central/web/authoringConfirm.jsp

# lams_central/web/common/taglibs.jsp

# lams_central/web/includes/javascript/authoring/authoringGeneral.js

# lams_central/web/includes/javascript/outcome.js

# lams_central/web/outcome/outcomeEdit.jsp

# lams_central/web/outcome/outcomeManage.jsp

# lams_common/src/java/org/lamsfoundation/lams/util/WebUtil.java

# lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookController.java

# lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/web/controller/AuthoringController.java

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/web/controller/MonitoringController.java

# lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_forum/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/McController.java

# lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/QaAuthoringController.java

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/QaMonitoringController.java

# lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_laqa/web/authoring/AuthoringTabsHolder.jsp

# lams_tool_laqa/web/authoring/newQuestionBox.jsp

# lams_tool_laqa/web/monitoring/MonitoringMaincontent.jsp

# lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_leader/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_mindmap/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_nb/src/java/org/lamsfoundation/lams/tool/noticeboard/web/controller/NbMonitoringController.java

# lams_tool_nb/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_notebook/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_pixlr/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_preview/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_sbmt/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/web/controller/AuthoringController.java

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/web/controller/MonitoringController.java

# lams_tool_scratchie/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_scratchie/web/pages/authoring/basic.jsp

# lams_tool_scribe/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_spreadsheet/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_survey/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_task/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_vote/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_wiki/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_zoom/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_www/web/WEB-INF/tags/OutcomeAuthor.tag

Options
    • -2
    • +3
    ./WEB-INF/tags/OutcomeAuthor.tag
    • -1
    • +35
    ./WEB-INF/web.xml
    • -7
    • +4
    ./addLesson.jsp
    • -9
    • +6
    ./authoring/authoring.jsp
    • -5
    • +1
    ./authoring/template/tool/assessmcq.jsp
    • -3
    • +1
    ./authoring/template/tool/assessment.jsp
    • -4
    • +1
    ./authoring/template/tool/mcquestion.jsp
    • -5
    • +1
    ./authoringConfirm.jsp
    • -1
    • +2
    ./common/taglibs.jsp
    • -27
    • +44
    ./includes/javascript/authoring/authoringGeneral.js
    • -2
    • +7
    ./includes/javascript/authoring/authoringMenu.js
    • -7
    • +7
    ./includes/javascript/main.js
    • -20
    • +31
    ./includes/javascript/orgGroup.js
    • -2
    • +3
    ./includes/javascript/outcome.js
    • -6
    • +4
    ./main.jsp
  16. … 80 more files in changeset.
Wednesday 08 Jan 2020
10:44 pm

Andrey Balan

LDEV-4932 Add CSRF Excel export in tools

Options
    • -2
    • +8
    ./includes/javascript/download.js
  2. … 9 more files in changeset.
Tuesday 07 Jan 2020
11:34 pm

Andrey Balan

LDEV-4932 Add CSRF to LD export and Excel export

Options
    • -0
    • +1
    ./authoring/authoring.jsp
    • -0
    • +1
    ./error.jsp
    • -2
    • +7
    ./includes/javascript/authoring/authoringMenu.js
    • -2
    • +2
    ./profile/portrait.jsp
  5. … 9 more files in changeset.
9:20 pm

Marcin Cieslak

LDEV-4644 Reintroduce an incorrectly deleted CSS file

Options
    • -0
    • +45
    ./css/outcome.scss
9:07 pm

Andrey Balan

LDEV-4932 Start using /common/taglibs.jsp in lams_central

Options
    • -5
    • +1
    ./authoring/authoring.jsp
    • -6
    • +2
    ./authoring/svgGenerator.jsp
    • -10
    • +4
    ./authoring/template/createresult.jsp
    • -4
    • +1
    ./authoring/template/genericintro.jsp
    • -1
    • +1
    ./authoring/template/grouping.jsp
    • -6
    • +1
    ./authoring/template/list.jsp
    • -3
    • +1
    ./authoring/template/tbl/appex.jsp
    • -5
    • +1
    ./authoring/template/tbl/tbl.jsp
    • -1
    • +2
    ./authoring/template/tool/assessgradeselector.jsp
    • -5
    • +1
    ./authoring/template/tool/assessmcq.jsp
    • -3
    • +1
    ./authoring/template/tool/assessment.jsp
    • -3
    • +1
    ./authoring/template/tool/assessmentQTI.jsp
    • -3
    • +1
    ./authoring/template/tool/assessoption.jsp
    • -3
    • +1
    ./authoring/template/tool/assessredooption.jsp
    • -3
    • +1
    ./authoring/template/tool/mcoption.jsp
  16. … 54 more files in changeset.
8:42 pm

Andrey Balan

LDEV-4932 Add CSRF to monitor and central

Options
    • -20
    • +31
    ./includes/javascript/orgGroup.js
    • -5
    • +22
    ./includes/javascript/orgGrouping.js
    • -13
    • +5
    ./orgGroup.jsp
    • -2
    • +2
    ./orgGrouping.jsp
    • -13
    • +8
    ./profile/portrait.jsp
  6. … 46 more files in changeset.
Monday 06 Jan 2020
4:09 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to add lesson

Options
    • -2
    • +2
    ./addLesson.jsp
  2. … 2 more files in changeset.
Sunday 05 Jan 2020
11:44 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to Author

- Save, Delete, Copy, Move and rename LDs

- Create folder

Options
    • -4
    • +4
    ./authoring/authoring.jsp
    • -27
    • +44
    ./includes/javascript/authoring/authoringGeneral.js
  3. … 2 more files in changeset.
Friday 03 Jan 2020
11:44 am

Marcin Cieslak

Merge branch 'LDEV-4745' into v4.0

# Conflicts:

# lams_admin/conf/language/lams/ApplicationResources.properties

# lams_central/conf/language/lams/ApplicationResources.properties

# lams_central/conf/language/lams/ApplicationResources_en_AU.properties

# lams_central/web/includes/javascript/authoring/authoringGeneral.js

# lams_common/src/java/org/lamsfoundation/lams/util/ConfigurationKeys.java

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/assessmentApplicationContext.xml

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/mcApplicationContext.xml

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/service/McService.java

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/scratchieApplicationContext.xml

Options
    • -41
    • +81
    ./addLesson.jsp
    • -1
    • +5
    ./authoring/authoring.jsp
    • -13
    • +28
    ./includes/javascript/addLesson.js
    • -0
    • +58
    ./includes/javascript/authoring/authoringGeneral.js
    • -1
    • +1
    ./includes/javascript/authoring/authoringMenu.js
    • -12
    • +21
    ./qb/search.jsp
    • -5
    • +69
    ./qb/stats.jsp
  8. … 13 more files in changeset.
Thursday 02 Jan 2020
2:12 pm

Ernie Ghiglione

LDEV-4932 Add CSRF to OutcomeAuthor tag

Options
    • -2
    • +3
    ./WEB-INF/tags/OutcomeAuthor.tag
  2. … 30 more files in changeset.
1:39 pm

Ernie Ghiglione

LDEV-4932: Adding CSRF to forum and central

CSRF additions to:

- Forum authoring methods

- Adding outcomes to activities in tools (changes to tag and central methods)

Options
    • -1
    • +1
    ./outcome/outcomeManage.jsp
  2. … 10 more files in changeset.
4:54 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to central

Adding CSRF to:

- Lesson dependencies (add/remove)

- Set dates to finish lesson

Options
    • -9
    • +13
    ./indexLessonConditions.jsp
  2. … 2 more files in changeset.
1:49 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to central and monitoring

Adding CSRF to:

- Grades on completion

- Enable/disable presence and IM

- Send emails

- Update users into lessons

- Send email notifications

- Delete email notifications

Options
    • -1
    • +3
    ./emailuser.jsp
  2. … 10 more files in changeset.
Wednesday 01 Jan 2020
12:43 am

Ernie Ghiglione

LDEV-4932 Passing CSRF token as a post rather than get

Options
    • -2
    • +2
    ./outcome/outcomeEdit.jsp
    • -3
    • +3
    ./profile/editprofile.jsp
  3. … 40 more files in changeset.
Tuesday 31 Dec 2019
7:35 pm

Andrey Balan

LDEV-4932 Add CSRF to monitor and central

* Add CSRF protection to:

- Change lesson status (incl. remove)

- Remove lesson using main.jsp button

- Rename lesson

* Start using /common/taglibs.jsp in lams_central

Options
    • -5
    • +2
    ./addLesson.jsp
    • -6
    • +1
    ./admin.jsp
    • -7
    • +1
    ./authoringConfirm.jsp
    • -0
    • +8
    ./common/taglibs.jsp
    • -2
    • +1
    ./dialogCloser.jsp
    • -6
    • +1
    ./editLessonIntro.jsp
    • -5
    • +2
    ./error.jsp
    • -7
    • +2
    ./errorContent.jsp
    • -5
    • +1
    ./favoriteOrganisations.jsp
    • -7
    • +7
    ./includes/javascript/main.js
    • -5
    • +1
    ./index.jsp
    • -6
    • +4
    ./main.jsp
    • -8
    • +2
    ./outcome/outcomeEdit.jsp
    • -8
    • +3
    ./outcome/outcomeManage.jsp
    • -7
    • +2
    ./outcome/scaleEdit.jsp
  16. … 9 more files in changeset.
4:25 am

Ernie Ghiglione

LDEV-4932 Add CSRF to central (outcomes)

Adding CSRF protection to:

- Delete outcomes

Options
    • -2
    • +3
    ./includes/javascript/outcome.js
    • -4
    • +3
    ./outcome/outcomeManage.jsp
  3. … 2 more files in changeset.
Monday 30 Dec 2019
1:30 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to admin

Adding CSRF token:

- When adding/editing learning outcomes

- Adding/editing and removing themes

Options
    • -3
    • +4
    ./outcome/outcomeEdit.jsp
  2. … 4 more files in changeset.
Tuesday 24 Dec 2019
11:28 pm

Andrey Balan

LDEV-4932 Secure edit in monitor with CSRF Guard

Options
    • -2
    • +7
    ./includes/javascript/common.js
  2. … 2 more files in changeset.
10:47 pm

Andrey Balan

LDEV-4932 Secure setting submission deadline with CSRF Guard

Options
    • -16
    • +15
    ./includes/javascript/monitorToolSummaryAdvanced.js
  2. … 63 more files in changeset.
Monday 23 Dec 2019
12:43 pm

Marcin Cieslak

LDEV-4932 Remove obsolete form input

Options
    • -1
    • +0
    ./profile/editprofile.jsp
Friday 20 Dec 2019
3:57 pm

Marcin Cieslak

LDEV-4932 Use same approach to token injection in all forms

Options
    • -1
    • +2
    ./profile/editprofile.jsp
1:58 pm

Marcin Cieslak

LDEV-4932 Extra comment in web.xml

Options
    • -1
    • +3
    ./WEB-INF/web.xml
1:38 pm

Marcin Cieslak

LDEV-4932 List actions to protect instead of checking everything

Options
    • -1
    • +1
    ./WEB-INF/web.xml
  2. … 1 more file in changeset.
Thursday 19 Dec 2019
4:01 pm

Marcin Cieslak

Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

Options
    • -70
    • +0
    ./WEB-INF/tlds/security/csrfguard.tld
    • -33
    • +1
    ./WEB-INF/web.xml
    • -3
    • +1
    ./profile/editprofile.jsp
  4. … 7 more files in changeset.
4:00 pm

Marcin Cieslak

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

Options
    • -0
    • +70
    ./WEB-INF/tlds/security/csrfguard.tld
    • -1
    • +33
    ./WEB-INF/web.xml
    • -1
    • +3
    ./profile/editprofile.jsp
  4. … 7 more files in changeset.
4:00 pm

Marcin Cieslak

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

Options
    • -0
    • +70
    ./WEB-INF/tlds/security/csrfguard.tld
    • -1
    • +33
    ./WEB-INF/web.xml
    • -1
    • +3
    ./profile/editprofile.jsp
  4. … 7 more files in changeset.
2:54 am

Fiona Malikoff <Fiona.Malikoff@gmail.com>

LDEV-4931 Adding ids to support Admin tests

Options
    • -1
    • +1
    ./main.jsp
    • -1
    • +1
    ./passwordChangeContent.jsp
    • -2
    • +2
    ./passwordChangeOkContent.jsp
    • -2
    • +2
    ./profile/editprofile.jsp
    • -1
    • +1
    ./profile/portrait.jsp
    • -5
    • +5
    ./profile/profile.jsp
  7. … 2 more files in changeset.
Wednesday 18 Dec 2019
11:18 pm

Andrey Balan

LDEV-4930 Avoid displaying excessive user parameters on edit profile jsp

Options
    • -20
    • +6
    ./profile/editprofile.jsp
  2. … 3 more files in changeset.