Fisheye on lams-github/lams_gradebook/web/error.jsp

lams-github (v4.7): LDEV-4932 Secure gradebook calls with CSRF Guard...

Andrey Balan — Mon, 30 Dec 2019 23:51:47 +0100

Andrey Balan committed 0933451 on branch v4.7, v4.8 in lams-github

LDEV-4932 Secure gradebook calls with CSRF Guard

* Secure the following gradebook calls in particular:

- Release marks

- Any change in marks

- Export

* Add taglibs.jsp to gradebook project

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +7)	\| History	\| Source	\| Diff
· /lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookController.java	(-1, +0)	\| History	\| Source	\| Diff
· /lams_gradebook/src/java/org/.../gradebook/web/controller/GradebookMonitoringController.java	(-75, +55)	\| History	\| Source	\| Diff
· /lams_gradebook/web/403.jsp	(-3, +2)	\| History	\| Source	\| Diff
· /lams_gradebook/web/404.jsp	(-3, +2)	\| History	\| Source	\| Diff
· /lams_gradebook/web/WEB-INF/web.xml	(-0, +15)	\| History	\| Source	\| Diff
· /lams_gradebook/web/common/taglibs.jsp	(-0, +8)	\| History	\| Source
· /lams_gradebook/web/error.jsp	(-5, +2)	\| History	\| Source	\| Diff
· /lams_gradebook/web/errorContent.jsp	(-5, +2)	\| History	\| Source	\| Diff
· /lams_gradebook/web/gradebookCourseLearner.jsp	(-5, +1)	\| History	\| Source	\| Diff
· /lams_gradebook/web/gradebookCourseMonitor.jsp	(-15, +10)	\| History	\| Source	\| Diff
· /lams_gradebook/web/gradebookMonitor.jsp	(-40, +51)	\| History	\| Source	\| Diff
· /lams_gradebook/web/includes/javascript/blockexportbutton.js	(-2, +16)	\| History	\| Source	\| Diff
· /lams_gradebook/web/msgContent.jsp	(-5, +2)	\| History	\| Source	\| Diff
· /lams_tool_preview/src/java/org/lamsfoundation/.../peerreview/web/controller/AuthoringController.java	(-1, +1)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4533 Exception details are hidden as per system config

Thu, 22 Mar 2018 06:55:29 +0100

Fiona Malikoff committed ac9c27f on branch v4.7, v4.8 in lams-github

LDEV-4533 Exception details are hidden as per system config

· /lams_admin/web/error.jsp

(-8, +16)

| History

| Source

| Diff

· /lams_central/web/error.jsp

(-3, +9)

| History

| Source

| Diff

· /lams_central/web/errorpages/error.jsp

(-0, +2)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/web/util/CustomStrutsExceptionHandler.java

(-5, +10)

| History

| Source

| Diff

· /lams_gradebook/web/error.jsp

(-6, +13)

| History

| Source

| Diff

· /lams_learning/web/error.jsp

(-7, +17)

| History

| Source

| Diff

· /lams_monitoring/web/error.jsp

(-7, +17)

| History

| Source

| Diff

· /lams_tool_assessment/web/error.jsp

(-7, +17)

| History

| Source

| Diff

· /lams_tool_bbb/web/error.jsp

(-26, +14)

| History

| Source

| Diff

· /lams_tool_chat/web/error.jsp

(-6, +15)

| History

| Source

| Diff

· /lams_tool_daco/web/error.jsp

(-8, +17)

| History

| Source

| Diff

· /lams_tool_doku/web/error.jsp

(-8, +17)

| History

| Source

| Diff

· /lams_tool_forum/web/error.jsp

(-7, +15)

| History

| Source

| Diff

· /lams_tool_gmap/web/error.jsp

(-27, +14)

| History

| Source

| Diff

· /lams_tool_images/web/error.jsp

(-8, +17)

| History

| Source

| Diff

… 20 more files in changeset.

lams-github (v4.7): LDEV-2917: Change DOCTYPE tag of files which have not been picked up by previous runs as they had this tag broken into 2...

Marcin Cieslak — Fri, 26 Feb 2016 08:17:56 +0100

Marcin Cieslak committed e48fc0e on branch v4.7, v4.8 in lams-github

LDEV-2917: Change DOCTYPE tag of files which have not been picked up by previous runs as they had this tag broken into 2 lines and regex had not detected them.

· /lams_admin/web/error.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/admin.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/authoringConfirm.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/development/wddxPost.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/editLessonIntro.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/error.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/errorpages/403.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/errorpages/404.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/errorpages/error.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/findUserLessons.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/index.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/lamscommunity/lamscommunityLogin.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/lessonIntro.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/sysadmin.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_gradebook/web/error.jsp

(-2, +1)

| History

| Source

| Diff

… 326 more files in changeset.

lams-github (v4.7): LDEV-3080: Escape text in mulitple places, preventing quotes from distrupting HTML tag parsing.

Marcin Cieslak — Sat, 27 Jul 2013 09:53:36 +0200

Marcin Cieslak committed f0c2b8f on branch v4.7, v4.8 in lams-github

LDEV-3080: Escape text in mulitple places, preventing quotes from distrupting HTML tag parsing.

· /lams_admin/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_central/web/editLessonIntro.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_gradebook/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_learning/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_monitoring/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_assessment/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/authoring/parts/shortansweroption.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/learning/parts/numerical.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/learning/parts/shortanswer.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_bbb/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_chat/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_daco/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_dimdim/web/error.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_tool_eadventure/web/error.jsp

(-3, +3)

| History

| Source

| Diff

… 27 more files in changeset.

lams-github (v4.7): LDEV-2173 - Putting most of gradebook into its own project for easier maintainence...

lfoxton — Thu, 09 Apr 2009 06:55:58 +0200

lfoxton committed e074865 on branch v4.7, v4.8 in lams-github

LDEV-2173 - Putting most of gradebook into its own project for easier maintainence

Database persistence beans and DAO are staying in lams_common

· /lams_gradebook/.classpath

(-0, +13)

| History

| Source

· /lams_gradebook/.cvsignore

(-0, +2)

| History

| Source

· /lams_gradebook/.project

(-0, +43)

| History

| Source

· /lams_gradebook/build.properties

(-0, +7)

| History

| Source

· /lams_gradebook/build.xml

(-0, +311)

| History

| Source

· /lams_gradebook/conf/jar/META-INF/MANIFEST.MF

(-0, +4)

| History

| Source

· /lams_gradebook/conf/language/lams/ApplicationResources.properties

(-0, +5)

| History

| Source

· /lams_gradebook/conf/language/lams/ApplicationResources_en_AU.properties

(-0, +3)

| History

| Source

· /lams_gradebook/conf/language/rams/ApplicationResources.properties

(-0, +3)

| History

| Source

· /lams_gradebook/conf/language/rams/ApplicationResources_en_AU.properties

(-0, +3)

| History

| Source

· /lams_gradebook/conf/war/META-INF/MANIFEST.MF

(-0, +4)

| History

| Source

· /lams_gradebook/conf/xdoclet/error-pages.xml

(-0, +13)

| History

| Source

· /lams_gradebook/conf/xdoclet/filter-mappings.xml

(-0, +12)

| History

| Source

· /lams_gradebook/conf/xdoclet/filters.xml

(-0, +28)

| History

| Source

· /lams_gradebook/conf/xdoclet/global-exceptions.xml

(-0, +8)

| History

| Source

… 78 more files in changeset.