lams-github

lams_central

Clone Tools

Stats

Commits this week: 0
Total Committers: 31
Last Commit:
Commits this week: 0

Lines of code count not available

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Saturday 28 Dec 2019
9:49 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to Assessment monitoring

Adding CSRF to:

- Change user marks

- Disclose correct answers

- Disclose group answers

Options
    • -0
    • +3
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 4 more files in changeset.
4:04 am

Ernie Ghiglione

LDEV-4932 Add CSRF to Scratchie monitoring

Adding CSRF for:

- Changing group marks

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 2 more files in changeset.
3:08 am

Ernie Ghiglione

LDEV-4932 Add CSRF for Submit files monitoring

Adding:

- Update marks

- Release marks

- Download marks

Options
    • -0
    • +3
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 4 more files in changeset.
1:35 am

Ernie Ghiglione

LDEV-4932 Adding CSRF protecting to change scratchie user in monitor

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 2 more files in changeset.
Friday 27 Dec 2019
8:24 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF protection to hide/show toggle open text submission for voting

Options
    • -0
    • +2
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 1 more file in changeset.
7:45 pm

Andrey Balan

Merge branch 'LDEV-4932' of https://github.com/lamsfoundation/lams into LDEV-4932

# Conflicts:

# lams_central/conf/security/Owasp.CsrfGuard.properties

# lams_tool_larsrc/web/WEB-INF/web.xml

# lams_tool_leader/web/WEB-INF/web.xml

Options
    • -1
    • +9
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 4 more files in changeset.
7:23 pm

Andrey Balan

LDEV-4932 Secure edit in monitor with CSRF Guard

* In order to secure /definelater.do path, added definelater() method to

AuthoringController to the tools missing it

* Remove unnecessary forms from monitor in Vote, NB, QA tools

Options
    • -0
    • +45
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 109 more files in changeset.
7:11 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to Task list

Adding CSRF protection to set verification for task list

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 2 more files in changeset.
3:21 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to Share resources

Adding CSRF prevention to hide/show toggle in monitor

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 6 more files in changeset.
3:01 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF protection to Notebook

Prevents CSRF attacks for monitors adding comments to students' notebook entries.

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 1 more file in changeset.
2:38 pm

Ernie Ghiglione

LDEV-4932 Add CSRF to Leader selection

Prevent CSRF for changing leader selection in monitor

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 5 more files in changeset.
1:08 pm

Ernie Ghiglione

LDEV-4932 Add CSRF prevention for changing marks in MCQ

Add CSRF prevention for changing marks in MCQ

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 2 more files in changeset.
Thursday 26 Dec 2019
10:08 pm

Ernie Ghiglione

LDEV-4932 Add CSRF prevention for monitor Image gallery

CSRF prevention for Monitor actions:

- toogle visibility

- add image

- edit image properties

Options
    • -0
    • +3
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 8 more files in changeset.
8:37 pm

Ernie Ghiglione

LDEV-4932 Forum CSRF update marks in monitor

Add CSRF prevention on Forum update marks

Options
    • -1
    • +2
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 2 more files in changeset.
Tuesday 24 Dec 2019
11:28 pm

Andrey Balan

LDEV-4932 Secure edit in monitor with CSRF Guard

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
    • -2
    • +7
    ./web/includes/javascript/common.js
  3. … 1 more file in changeset.
10:47 pm

Andrey Balan

LDEV-4932 Secure setting submission deadline with CSRF Guard

Options
    • -0
    • +15
    ./conf/security/Owasp.CsrfGuard.properties
    • -16
    • +15
    ./web/includes/javascript/monitorToolSummaryAdvanced.js
  3. … 62 more files in changeset.
Monday 23 Dec 2019
1:59 pm

Ernie Ghiglione

LDEV-4745 LDEV-4875 Adding/updating labels

Adding and updating labels for QB and VSAs for LAMS v4.0

Options
    • -86
    • +91
    ./conf/language/lams/ApplicationResources.properties
    • -95
    • +92
    ./conf/language/lams/ApplicationResources_en_AU.properties
  3. … 4 more files in changeset.
12:43 pm

Marcin Cieslak

LDEV-4932 Remove obsolete form input

Options
    • -1
    • +0
    ./web/profile/editprofile.jsp
Friday 20 Dec 2019
3:57 pm

Marcin Cieslak

LDEV-4932 Use same approach to token injection in all forms

Options
    • -1
    • +2
    ./web/profile/editprofile.jsp
3:53 pm

Marcin Cieslak

LDEV-4932 Introduce CSRF Guard to Forum. Secure authoring.

Options
    • -0
    • +1
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 5 more files in changeset.
2:20 pm

Marcin Cieslak

LDEV-4932 CSRF Guard configuration is needed only in one place

Options
    • -2
    • +4
    ./conf/security/Owasp.CsrfGuard.properties
  2. … 1 more file in changeset.
1:58 pm

Marcin Cieslak

LDEV-4932 Extra comment in web.xml

Options
    • -1
    • +3
    ./web/WEB-INF/web.xml
1:38 pm

Marcin Cieslak

LDEV-4932 List actions to protect instead of checking everything

Options
    • -1
    • +9
    ./conf/security/Owasp.CsrfGuard.properties
    • -1
    • +1
    ./web/WEB-INF/web.xml
Thursday 19 Dec 2019
8:42 pm

Andrey Balan

Merge branch 'develop' into LDEV-4745

# Conflicts:

# lams_admin/conf/language/lams/ApplicationResources.properties

# lams_admin/conf/language/lams/ApplicationResources_en_AU.properties

# lams_admin/conf/language/lams/ApplicationResources_es_ES.properties

# lams_central/conf/language/lams/ApplicationResources.properties

# lams_central/conf/language/lams/ApplicationResources_en_AU.properties

# lams_common/src/java/org/lamsfoundation/lams/commonContext.xml

# lams_learning/conf/language/lams/ApplicationResources.properties

# lams_learning/conf/language/lams/ApplicationResources_en_AU.properties

# lams_learning/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_assessment/conf/language/lams/ApplicationResources.properties

# lams_tool_assessment/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_assessment/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/assessmentApplicationContext.xml

# lams_tool_lamc/conf/language/lams/ApplicationResources.properties

# lams_tool_lamc/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_lamc/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_lamc/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_laqa/conf/language/lams/ApplicationResources.properties

# lams_tool_laqa/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_laqa/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_laqa/web/learning/CombinedAnswersContent.jsp

# lams_tool_laqa/web/learning/IndividualLearnerResults.jsp

# lams_tool_laqa/web/learning/LearnerRep.jsp

# lams_tool_laqa/web/learning/SequentialAnswersContent.jsp

# lams_tool_mindmap/conf/language/lams/ApplicationResources.properties

# lams_tool_mindmap/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_mindmap/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_nb/conf/language/lams/ApplicationResources.properties

# lams_tool_nb/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_nb/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_nb/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_notebook/conf/language/lams/ApplicationResources.properties

# lams_tool_notebook/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_notebook/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_notebook/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_pixlr/conf/language/lams/ApplicationResources.properties

# lams_tool_pixlr/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_pixlr/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_sbmt/conf/language/lams/ApplicationResources.properties

# lams_tool_sbmt/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_sbmt/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_sbmt/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_scratchie/conf/language/lams/ApplicationResources.properties

# lams_tool_scratchie/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_scratchie/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/scratchieApplicationContext.xml

# lams_tool_scribe/conf/language/lams/ApplicationResources.properties

# lams_tool_scribe/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_scribe/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_scribe/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_spreadsheet/conf/language/lams/ApplicationResources.properties

# lams_tool_spreadsheet/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_spreadsheet/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_spreadsheet/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_survey/conf/language/lams/ApplicationResources.properties

# lams_tool_survey/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_survey/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_survey/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_task/conf/language/lams/ApplicationResources.properties

# lams_tool_task/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_task/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_task/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_vote/conf/language/lams/ApplicationResources.properties

# lams_tool_vote/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_vote/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_vote/conf/language/lams/ApplicationResources_es_ES.properties

# lams_tool_wiki/conf/language/lams/ApplicationResources.properties

# lams_tool_wiki/conf/language/lams/ApplicationResources_el_GR.properties

# lams_tool_wiki/conf/language/lams/ApplicationResources_en_AU.properties

# lams_tool_wiki/conf/language/lams/ApplicationResources_es_ES.properties

Options
    • -4
    • +7
    ./conf/language/lams/ApplicationResources.properties
    • -1
    • +10
    ./conf/language/lams/ApplicationResources_en_AU.properties
  3. … 15 more files in changeset.
4:01 pm

Marcin Cieslak

Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

Options
    • -7
    • +0
    ./build.xml
    • -3
    • +0
    ./conf/security/Owasp.CsrfGuard.properties
    • -70
    • +0
    ./web/WEB-INF/tlds/security/csrfguard.tld
    • -33
    • +1
    ./web/WEB-INF/web.xml
    • -3
    • +1
    ./web/profile/editprofile.jsp
  6. … 5 more files in changeset.
4:00 pm

Marcin Cieslak

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

Options
    • -0
    • +7
    ./build.xml
    • -0
    • +3
    ./conf/security/Owasp.CsrfGuard.properties
    • -0
    • +70
    ./web/WEB-INF/tlds/security/csrfguard.tld
    • -1
    • +33
    ./web/WEB-INF/web.xml
    • -1
    • +3
    ./web/profile/editprofile.jsp
  6. … 5 more files in changeset.
4:00 pm

Marcin Cieslak

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

Options
    • -0
    • +7
    ./build.xml
    • -0
    • +3
    ./conf/security/Owasp.CsrfGuard.properties
    • -0
    • +70
    ./web/WEB-INF/tlds/security/csrfguard.tld
    • -1
    • +33
    ./web/WEB-INF/web.xml
    • -1
    • +3
    ./web/profile/editprofile.jsp
  6. … 5 more files in changeset.
2:54 am

Fiona Malikoff <Fiona.Malikoff@gmail.com>

LDEV-4931 Adding ids to support Admin tests

Options
    • -1
    • +1
    ./web/main.jsp
    • -1
    • +1
    ./web/passwordChangeContent.jsp
    • -2
    • +2
    ./web/passwordChangeOkContent.jsp
    • -2
    • +2
    ./web/profile/editprofile.jsp
    • -1
    • +1
    ./web/profile/portrait.jsp
    • -5
    • +5
    ./web/profile/profile.jsp
  7. … 2 more files in changeset.
Wednesday 18 Dec 2019
11:21 pm

Andrey Balan

LDEV-4929 Add missing service method names to xApplicationContext.xmls

* Alphabetize method names in to xApplicationContext.xmls

Options
    • -10
    • +8
    ./src/java/org/lamsfoundation/lams/authoring/authoringApplicationContext.xml
    • -1
    • +0
    ./src/java/org/lamsfoundation/lams/workspace/service/IWorkspaceManagementService.java
    • -6
    • +5
    ./src/java/org/lamsfoundation/lams/workspace/workspaceApplicationContext.xml
  4. … 40 more files in changeset.
11:18 pm

Andrey Balan

LDEV-4930 Avoid displaying excessive user parameters on edit profile jsp

Options
    • -2
    • +0
    ./src/java/org/lamsfoundation/lams/web/ProfileController.java
    • -13
    • +1
    ./src/java/org/lamsfoundation/lams/web/ProfileSaveController.java
    • -23
    • +1
    ./src/java/org/lamsfoundation/lams/web/UserForm.java
    • -20
    • +6
    ./web/profile/editprofile.jsp