Fisheye on lams-github/lams_central/conf/security

lams-github (v4.8): LDEV-5420 Allow selecting which questions to print in QB

Marcin Cieslak — Thu, 04 Jan 2024 11:05:14 +0100

Marcin Cieslak committed 374bf62 on branch v4.8 in lams-github

LDEV-5420 Allow selecting which questions to print in QB

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +2)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/qb/PrintQbQuestionController.java	(-2, +16)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/qb/QbCollectionController.java	(-1, +4)	\| History	\| Source	\| Diff
· /lams_central/web/qb/collection.jsp	(-14, +20)	\| History	\| Source	\| Diff

lams-github (v4.7): Merge remote-tracking branch 'origin/v4.6' into v4.7...

Marcin Cieslak — Sat, 14 Jan 2023 18:59:56 +0100

Marcin Cieslak committed 6481b34 on branch v4.7, v4.8 in lams-github

Merge remote-tracking branch 'origin/v4.6' into v4.7

Conflicts:

lams_tool_assessment/conf/language/lams/ApplicationResources.properties

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_tool_assessment/conf/language/lams/ApplicationResources.properties	(-0, +2)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5355 Allow comment editing in Peer Review tool

Marcin Cieslak — Wed, 11 Jan 2023 21:22:01 +0100

Marcin Cieslak committed a8e22ae on branch v4.7, v4.8 in lams-github

LDEV-5355 Allow comment editing in Peer Review tool

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_tool_preview/src/java/org/lamsfoundation/.../peerreview/web/controller/MonitoringController.java	(-0, +11)	\| History	\| Source	\| Diff
· /lams_tool_preview/web/pages/monitoring/criteriapart.jsp	(-4, +22)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5338 Rename paths to reflect grouping flow better

Marcin Cieslak — Mon, 14 Nov 2022 11:37:24 +0100

Marcin Cieslak committed b28b1e4 on branch v4.7, v4.8 in lams-github

LDEV-5338 Rename paths to reflect grouping flow better

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-2, +2)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/GroupingController.java	(-3, +3)	\| History	\| Source	\| Diff
· /lams_central/web/extGroups.jsp	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/web/includes/javascript/main.js	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/web/includes/javascript/orgGroup.js	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/web/includes/javascript/orgGrouping.js	(-4, +4)	\| History	\| Source	\| Diff
· /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/GroupingController.java	(-10, +10)	\| History	\| Source	\| Diff
· /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/GroupingUploadController.java	(-5, +5)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5326, LDEV-5327 Secure requests to sysadmin clean up functions

Marcin Cieslak — Thu, 22 Sep 2022 11:09:46 +0200

Marcin Cieslak committed 5b9fbd9 on branch v4.7, v4.8 in lams-github

LDEV-5326, LDEV-5327 Secure requests to sysadmin clean up functions

· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/CleanupController.java	(-2, +16)	\| History	\| Source	\| Diff
· /lams_admin/web/cleanup.jsp	(-1, +6)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +4)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5304 Secure login page from CSRF attack...

Marcin Cieslak — Sun, 03 Apr 2022 08:59:11 +0200

Marcin Cieslak committed d0f91f1 on branch v4.7, v4.8 in lams-github

LDEV-5304 Secure login page from CSRF attack

Check for CSRF attack only for regular logins.

For LoginAs feature and integrations existing HTTP session gets

invalidated and so is the CSRF token.

· /lams_build/3rdParty.userlibraries	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +2)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-2, +4)	\| History	\| Source	\| Diff
· /lams_central/web/loginTwoFactorAuth.jsp	(-0, +1)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-2, +12)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5304 Update CSRF Guard to version 4.1.3

Marcin Cieslak — Sun, 03 Apr 2022 08:02:27 +0200

Marcin Cieslak committed 3582a26 on branch v4.7, v4.8 in lams-github

LDEV-5304 Update CSRF Guard to version 4.1.3

· /lams_build/lib/csrfguard/csrf.module.xml	(-1, +5)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-3.1.0-custom-2020.01.07.jar	(binary)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-extension-session-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-jsp-tags-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/liblist.txt	(-2, +1)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-2, +6)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5185 Introduce time limits to Scratchie monitoring

Marcin Cieslak — Mon, 01 Mar 2021 19:36:34 +0100

Marcin Cieslak committed 804dca7 on branch v4.7, v4.8 in lams-github

LDEV-5185 Introduce time limits to Scratchie monitoring

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +2)

| History

| Source

| Diff

· /lams_tool_assessment/conf/language/lams/ApplicationResources.properties

(-0, +1)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/monitoring/summary.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_doku/conf/language/lams/ApplicationResources.properties

(-0, +1)

| History

| Source

| Diff

· /lams_tool_doku/web/pages/monitoring/summary.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_scratchie/conf/language/lams/ApplicationResources.properties

(-0, +20)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/dbupdates/patch20210301.sql

(-1, +1)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/model/Scratchie.java

(-0, +5)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/model/ScratchieSession.java

(-3, +3)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/IScratchieService.java

(-9, +1)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/.../tool/scratchie/service/ScratchieServiceImpl.java

(-18, +0)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/.../scratchie/web/controller/LearningController.java

(-7, +1)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/.../scratchie/web/controller/LearningWebsocketServer.java

(-1, +1)

| History

| Source

| Diff

· /lams_tool_scratchie/src/java/org/lamsfoundation/.../scratchie/web/controller/MonitoringController.java

(-0, +77)

| History

| Source

| Diff

· /lams_tool_scratchie/web/includes/css/scratchie-learning.scss

(-0, +12)

| History

| Source

| Diff

… 5 more files in changeset.

lams-github (v4.7): LDEV-5142 Introduce advanced time limits for Doku

Marcin Cieslak — Thu, 11 Feb 2021 13:33:28 +0100

Marcin Cieslak committed 0ebaba4 on branch v4.7, v4.8 in lams-github

LDEV-5142 Introduce advanced time limits for Doku

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +2)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/web/controller/AbstractTimeLimitWebsocketServer.java

(-0, +21)

| History

| Source

| Diff

· /lams_tool_assessment/src/java/org/lamsfoundation/.../tool/assessment/service/AssessmentServiceImpl.java

(-1, +1)

| History

| Source

| Diff

· /lams_tool_assessment/src/java/org/.../assessment/web/controller/LearningWebsocketServer.java

(-3, +8)

| History

| Source

| Diff

· /lams_tool_doku/conf/language/lams/ApplicationResources.properties

(-1, +19)

| History

| Source

| Diff

· /lams_tool_doku/conf/language/lams/ApplicationResources_en_AU.properties

(-1, +0)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/DokumaranConstants.java

(-1, +1)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/dao/DokumaranUserDAO.java

(-2, +0)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/.../dokumaran/dao/hibernate/DokumaranUserDAOHibernate.java

(-11, +0)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/dbupdates/patch20210210.sql

(-0, +36)

| History

| Source

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/dokumaranApplicationContext.xml

(-0, +3)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/model/Dokumaran.java

(-22, +29)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/model/DokumaranUser.java

(-38, +10)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/service/DokumaranService.java

(-53, +38)

| History

| Source

| Diff

· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/service/IDokumaranService.java

(-17, +9)

| History

| Source

| Diff

… 10 more files in changeset.

lams-github (v4.7): LDEV-5143 Allow changing leader in Dokumaran monitoring

Marcin Cieslak — Mon, 25 Jan 2021 22:29:58 +0100

Marcin Cieslak committed 8d372a4 on branch v4.7, v4.8 in lams-github

LDEV-5143 Allow changing leader in Dokumaran monitoring

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_tool_doku/conf/language/lams/ApplicationResources.properties	(-0, +3)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/dokumaranApplicationContext.xml	(-0, +1)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/dto/SessionDTO.java	(-0, +18)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/service/DokumaranService.java	(-0, +36)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/service/IDokumaranService.java	(-0, +2)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/.../tool/dokumaran/web/controller/MonitoringController.java	(-0, +10)	\| History	\| Source	\| Diff
· /lams_tool_doku/web/pages/learning/learning.jsp	(-0, +11)	\| History	\| Source	\| Diff
· /lams_tool_doku/web/pages/monitoring/summary.jsp	(-0, +40)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5143 Allow changing leader in Q&A, Submit Files and Vote monitoring

Marcin Cieslak — Mon, 25 Jan 2021 11:28:58 +0100

Marcin Cieslak committed f860043 on branch v4.7, v4.8 in lams-github

LDEV-5143 Allow changing leader in Q&A, Submit Files and Vote monitoring

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-1, +6)

| History

| Source

| Diff

· /lams_tool_assessment/src/java/org/.../lams/tool/assessment/assessmentApplicationContext.xml

(-0, +1)

| History

| Source

| Diff

· /lams_tool_assessment/src/java/org/lamsfoundation/.../tool/assessment/service/AssessmentServiceImpl.java

(-14, +19)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/monitoring/summary.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_tool_laqa/conf/language/lams/ApplicationResources.properties

(-0, +3)

| History

| Source

| Diff

· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/dto/GroupDTO.java

(-21, +20)

| History

| Source

| Diff

· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/qaApplicationContext.xml

(-0, +2)

| History

| Source

| Diff

· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/service/IQaService.java

(-7, +4)

| History

| Source

| Diff

· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/service/QaService.java

(-0, +50)

| History

| Source

| Diff

· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/MonitoringController.java

(-1, +14)

| History

| Source

| Diff

· /lams_tool_laqa/web/learning/AnswersContent.jsp

(-0, +10)

| History

| Source

| Diff

· /lams_tool_laqa/web/learning/LearnerRep.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_tool_laqa/web/monitoring/MonitoringMaincontent.jsp

(-0, +32)

| History

| Source

| Diff

· /lams_tool_laqa/web/monitoring/SummaryContent.jsp

(-1, +9)

| History

| Source

| Diff

· /lams_tool_sbmt/conf/language/lams/ApplicationResources.properties

(-0, +3)

| History

| Source

| Diff

… 19 more files in changeset.

lams-github (v4.7): LDEV-5143 Extract TBL monitoring Change Leader feature...

Marcin Cieslak — Sun, 17 Jan 2021 16:33:17 +0100

Marcin Cieslak committed ec9b0ff on branch v4.7, v4.8 in lams-github

LDEV-5143 Extract TBL monitoring Change Leader feature

It will be used in other tools afterwards.

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +1)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/tool/service/ILamsToolService.java	(-4, +9)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/tool/service/LamsToolService.java	(-9, +28)	\| History	\| Source	\| Diff
· /lams_monitoring/conf/language/lams/ApplicationResources.properties	(-1, +0)	\| History	\| Source	\| Diff
· /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/TblMonitoringController.java	(-5, +11)	\| History	\| Source	\| Diff
· /lams_monitoring/web/tblmonitor/teams.jsp	(-84, +25)	\| History	\| Source	\| Diff
· /lams_tool_leader/conf/language/lams/ApplicationResources.properties	(-0, +4)	\| History	\| Source	\| Diff
· /lams_tool_leader/src/java/org/.../leaderselection/web/controller/MonitoringController.java	(-1, +90)	\| History	\| Source	\| Diff
· /lams_tool_leader/src/java/org/.../leaderselection/web/controller/TblMonitoringController.java	(-54, +0)	\| History	\| Source	\| Diff
· /lams_tool_leader/web/pages/monitoring/changeLeaderDialog.jsp	(-0, +78)	\| History	\| Source

lams-github (v4.7): LKC-215 Allow comment when sending question for reviewing

Marcin Cieslak — Thu, 16 Jul 2020 16:49:38 +0200

Marcin Cieslak committed 39fdd7c on branch v4.7, v4.8 in lams-github

LKC-215 Allow comment when sending question for reviewing

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +1)

| History

| Source

| Diff

lams-github (v4.7): LKC-213 Add CSRF protection to Workflow Automation project

Marcin Cieslak — Fri, 03 Jul 2020 14:03:10 +0200

Marcin Cieslak committed 99d62c2 on branch v4.7, v4.8 in lams-github

LKC-213 Add CSRF protection to Workflow Automation project

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-2, +15)

| History

| Source

| Diff

lams-github (v4.7): LDEV-5041 Add individual time limits

Marcin Cieslak — Thu, 18 Jun 2020 17:50:14 +0200

Marcin Cieslak committed 0336d51 on branch v4.7, v4.8 in lams-github

LDEV-5041 Add individual time limits

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +2)	\| History	\| Source	\| Diff
· /lams_tool_assessment/conf/language/lams/ApplicationResources.properties	(-2, +1)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/dao/AssessmentUserDAO.java	(-0, +4)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/.../assessment/dao/hibernate/AssessmentUserDAOHibernate.java	(-0, +22)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/dbupdates/patch20200617.sql	(-0, +2)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/model/AssessmentUser.java	(-0, +11)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/.../tool/assessment/service/AssessmentServiceImpl.java	(-1, +11)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/.../tool/assessment/service/IAssessmentService.java	(-0, +4)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/.../assessment/web/controller/LearningWebsocketServer.java	(-0, +16)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/.../assessment/web/controller/MonitoringController.java	(-0, +49)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/monitoring.jsp	(-0, +5)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/parts/timeLimit.jsp	(-3, +59)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/summary.jsp	(-0, +104)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5041 Control relative time limit in Assessment monitor

Marcin Cieslak — Wed, 17 Jun 2020 12:17:12 +0200

Marcin Cieslak committed ca3fa00 on branch v4.7, v4.8 in lams-github

LDEV-5041 Control relative time limit in Assessment monitor

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_tool_assessment/conf/language/lams/ApplicationResources.properties	(-1, +20)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/.../assessment/web/controller/LearningWebsocketServer.java	(-3, +5)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/.../assessment/web/controller/MonitoringController.java	(-0, +14)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/learning/learning.jsp	(-134, +139)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/parts/timeLimit.jsp	(-0, +70)	\| History	\| Source
· /lams_tool_assessment/web/pages/monitoring/summary.jsp	(-1, +73)	\| History	\| Source	\| Diff

lams-github (v4.7): DEMO-5 Add Google SSO integration to CSRF Guard

Marcin Cieslak — Tue, 02 Jun 2020 11:01:13 +0200

Marcin Cieslak committed 26a325f on branch v4.7, v4.8 in lams-github

DEMO-5 Add Google SSO integration to CSRF Guard

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +3)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4999 Allow marks update in Dokuy monitoring summary page

Marcin Cieslak — Mon, 20 Apr 2020 12:55:34 +0200

Marcin Cieslak committed 0558068 on branch v4.7, v4.8 in lams-github

LDEV-4999 Allow marks update in Dokuy monitoring summary page

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/web/includes/javascript/jquery.tablesorter-editable.js	(-0, +4)	\| History	\| Source
· /lams_tool_doku/conf/language/lams/ApplicationResources_en_AU.properties	(-0, +2)	\| History	\| Source	\| Diff
· /lams_tool_doku/src/java/org/lamsfoundation/.../tool/dokumaran/web/controller/MonitoringController.java	(-1, +46)	\| History	\| Source	\| Diff
· /lams_tool_doku/web/pages/monitoring/summary.jsp	(-13, +68)	\| History	\| Source	\| Diff

lams-github (v4.7): Merge remote-tracking branch 'origin/master' into v4.0...

Marcin Cieslak — Fri, 20 Mar 2020 06:35:02 +0100

Marcin Cieslak committed a61b6ad on branch v4.7, v4.8 in lams-github

Merge remote-tracking branch 'origin/master' into v4.0

Conflicts:

lams_central/src/java/org/lamsfoundation/lams/authoring/ObjectExtractor.java

lams_learning/src/java/org/lamsfoundation/lams/learning/web/controller/GateController.java

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/dto/GroupSummary.java

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java

· /lams_central/conf/language/lams/ApplicationResources.properties

(-0, +2)

| History

| Source

| Diff

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +1)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/ObjectExtractor.java

(-1664, +1673)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-2, +11)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringActivity.js

(-1, +4)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringGeneral.js

(-3, +7)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringProperty.js

(-3, +14)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learning/service/ILearnerService.java

(-1, +3)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/dao/hibernate/ActivityDAO.java

(-3, +6)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/dto/AuthoringActivityDTO.java

(-20, +18)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/service/ExportToolContentService.java

(-0, +8)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/util/AuthoringJsonTags.java

(-1, +2)

| History

| Source

| Diff

· /lams_learning/conf/language/lams/ApplicationResources.properties

(-0, +3)

| History

| Source

| Diff

· /lams_learning/src/java/org/lamsfoundation/lams/learning/service/ILearnerFullService.java

(-1, +3)

| History

| Source

| Diff

· /lams_learning/src/java/org/lamsfoundation/lams/learning/service/LearnerService.java

(-62, +74)

| History

| Source

| Diff

… 7 more files in changeset.

lams-github (v4.7): LDEV-4989 Password Gate initial implementation

Marcin Cieslak — Mon, 16 Mar 2020 15:44:27 +0100

Marcin Cieslak committed 7116e79 on branch v4.7, v4.8 in lams-github

LDEV-4989 Password Gate initial implementation

· /lams_central/conf/language/lams/ApplicationResources.properties

(-0, +2)

| History

| Source

| Diff

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +1)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/ObjectExtractor.java

(-1661, +1670)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-2, +11)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringActivity.js

(-1, +4)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringGeneral.js

(-3, +7)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/authoring/authoringProperty.js

(-3, +14)

| History

| Source

| Diff

· /lams_common/conf/language/lams/ApplicationResources.properties

(-0, +1)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch20200315.sql

(-0, +21)

| History

| Source

· /lams_common/src/java/org/lamsfoundation/lams/learning/service/ILearnerService.java

(-1, +3)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/Activity.java

(-6, +16)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/ContributionTypes.java

(-1, +1)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/PasswordGateActivity.java

(-0, +110)

| History

| Source

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/dao/hibernate/ActivityDAO.java

(-3, +6)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/learningdesign/dto/AuthoringActivityDTO.java

(-20, +18)

| History

| Source

| Diff

… 22 more files in changeset.

lams-github (v4.7): LDEV-4932 Add CSRF to password change

Andrey Balan — Wed, 12 Feb 2020 14:21:09 +0100

Andrey Balan committed df52e28 on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to password change

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/web/passwordChangeContent.jsp	(-39, +44)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4932 Add CSRF to password change...

Andrey Balan — Wed, 12 Feb 2020 14:21:09 +0100

Andrey Balan committed 52aa963 on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to password change

(cherry picked from commit df52e287d4a5f815849470ffb1fd82a3867a6bdb)

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/web/passwordChangeContent.jsp	(-39, +44)	\| History	\| Source	\| Diff

lams-github (v4.7): Merge branch 'master' into v4.0

Andrey Balan — Fri, 07 Feb 2020 22:18:29 +0100

Andrey Balan committed 563a06e on branch v4.7, v4.8 in lams-github

Merge branch 'master' into v4.0

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-1, +0)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4932 No need to protect /admin/user/remove.do, as it simply shows another jsp page

Andrey Balan — Fri, 07 Feb 2020 22:17:24 +0100

Andrey Balan committed ead5d98 on branch v4.7, v4.8 in lams-github

LDEV-4932 No need to protect /admin/user/remove.do, as it simply shows another jsp page

· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserController.java	(-2, +2)	\| History	\| Source	\| Diff
· /lams_admin/web/remove.jsp	(-2, +8)	\| History	\| Source	\| Diff
· /lams_admin/web/userlist.jsp	(-13, +12)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +0)	\| History	\| Source	\| Diff

lams-github (v4.7): Merge branch 'master' into v4.0

Andrey Balan — Thu, 23 Jan 2020 19:42:11 +0100

Andrey Balan committed 3ef413f on branch v4.7, v4.8 in lams-github

Merge branch 'master' into v4.0

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +5)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4932 Add CSRF to LKC monitoring

Andrey Balan — Thu, 23 Jan 2020 19:26:20 +0100

Andrey Balan committed a5d10fd on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to LKC monitoring

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +5)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4932 Add CSRF to Assessment monitoring

Andrey Balan — Thu, 16 Jan 2020 23:04:56 +0100

Andrey Balan committed 4a29020 on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to Assessment monitoring

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +2)	\| History	\| Source	\| Diff
· /lams_tool_assessment/src/java/org/lamsfoundation/.../assessment/web/controller/MonitoringController.java	(-3, +3)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/parts/questionsummary.jsp	(-1, +2)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/monitoring/statisticpart.jsp	(-1, +3)	\| History	\| Source	\| Diff

lams-github (v4.7): Merge branch 'master' into v4.0...

Andrey Balan — Fri, 10 Jan 2020 15:28:53 +0100

Andrey Balan committed f7937ad on branch v4.7, v4.8 in lams-github

Merge branch 'master' into v4.0

# Conflicts:

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/service/McService.java

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/AuthoringController.java

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/LearningController.java

· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-1, +2)	\| History	\| Source	\| Diff
· /lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/AuthoringController.java	(-0, +816)	\| History	\| Source
· /lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/LearningController.java	(-0, +885)	\| History	\| Source
· /lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/MonitoringController.java	(-0, +559)	\| History	\| Source
· /lams_tool_lamc/src/java/org/lamsfoundation/.../tool/mc/web/controller/PedagogicalPlannerController.java	(-0, +182)	\| History	\| Source
· /lams_tool_laqa/src/java/org/lamsfoundation/.../tool/qa/web/controller/AuthoringConditionController.java	(-0, +437)	\| History	\| Source
· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/AuthoringController.java	(-0, +641)	\| History	\| Source
· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/LearningController.java	(-0, +1318)	\| History	\| Source
· /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/MonitoringController.java	(-0, +399)	\| History	\| Source
· /lams_tool_laqa/src/java/org/lamsfoundation/.../tool/qa/web/controller/PedagogicalPlannerController.java	(-0, +130)	\| History	\| Source
· /lams_tool_nb/src/java/org/lamsfoundation/.../tool/noticeboard/web/controller/AuthoringController.java	(-0, +234)	\| History	\| Source
· /lams_tool_nb/src/java/org/lamsfoundation/.../tool/noticeboard/web/controller/LearningController.java	(-0, +367)	\| History	\| Source
· /lams_tool_nb/src/java/org/lamsfoundation/.../tool/noticeboard/web/controller/MonitoringController.java	(-0, +165)	\| History	\| Source
· /lams_tool_sbmt/src/java/org/lamsfoundation/lams/tool/sbmt/web/controller/LearningController.java	(-0, +613)	\| History	\| Source
· /lams_tool_scratchie/.classpath	(-2, +5)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4932 Add CSRF to QB bank calls

Andrey Balan — Thu, 09 Jan 2020 23:10:14 +0100

Andrey Balan committed 21555f8 on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to QB bank calls

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +18)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/qb/EditQbQuestionController.java

(-2, +2)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/qb/ImsQtiController.java

(-7, +10)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/qb/QbCollectionController.java

(-7, +8)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/qb/QbStatsController.java

(-1, +2)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/qb/XmlQuestionsController.java

(-2, +3)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tbl/tbl.jsp

(-12, +9)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addVsa.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addessay.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addmarkhedging.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addmatchingpairs.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addmultiplechoice.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addnumerical.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addordering.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_central/web/qb/authoring/addtruefalse.jsp

(-0, +1)

| History

| Source

| Diff

… 18 more files in changeset.

lams-github (v4.7): Merge branch 'master' into v4.0...

Andrey Balan — Thu, 09 Jan 2020 08:59:33 +0100

Andrey Balan committed e6dc4db on branch v4.7, v4.8 in lams-github

Merge branch 'master' into v4.0

# Conflicts:

# lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_build/build.xml

# lams_build/liblist.txt

# lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java

# lams_central/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_central/web/authoringConfirm.jsp

# lams_central/web/common/taglibs.jsp

# lams_central/web/includes/javascript/authoring/authoringGeneral.js

# lams_central/web/includes/javascript/outcome.js

# lams_central/web/outcome/outcomeEdit.jsp

# lams_central/web/outcome/outcomeManage.jsp

# lams_common/src/java/org/lamsfoundation/lams/util/WebUtil.java

# lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookController.java

# lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/web/controller/AuthoringController.java

# lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/web/controller/MonitoringController.java

# lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_forum/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/McController.java

# lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/QaAuthoringController.java

# lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/QaMonitoringController.java

# lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_laqa/web/authoring/AuthoringTabsHolder.jsp

# lams_tool_laqa/web/authoring/newQuestionBox.jsp

# lams_tool_laqa/web/monitoring/MonitoringMaincontent.jsp

# lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_leader/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_mindmap/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_nb/src/java/org/lamsfoundation/lams/tool/noticeboard/web/controller/NbMonitoringController.java

# lams_tool_nb/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_notebook/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_pixlr/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_preview/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_sbmt/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/web/controller/AuthoringController.java

# lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/web/controller/MonitoringController.java

# lams_tool_scratchie/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_scratchie/web/pages/authoring/basic.jsp

# lams_tool_scribe/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_spreadsheet/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_survey/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_task/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_vote/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_wiki/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_tool_zoom/web/WEB-INF/tags/OutcomeAuthor.tag

# lams_www/web/WEB-INF/tags/OutcomeAuthor.tag

· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/SessionMaintainController.java

(-2, +3)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag

(-2, +3)

| History

| Source

| Diff

· /lams_admin/web/user.jsp

(-16, +21)

| History

| Source

| Diff

· /lams_admin/web/userChangePass.jsp

(-1, +2)

| History

| Source

| Diff

· /lams_build/build.xml

(-1, +9)

| History

| Source

| Diff

· /lams_build/conf/j2ee/jboss-deployment-structure.xml

(-0, +1)

| History

| Source

| Diff

· /lams_build/liblist.txt

(-0, +3)

| History

| Source

| Diff

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +237)

| History

| Source

· /lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java

(-5, +6)

| History

| Source

| Diff

· /lams_central/web/WEB-INF/tags/OutcomeAuthor.tag

(-2, +3)

| History

| Source

| Diff

· /lams_central/web/WEB-INF/web.xml

(-1, +35)

| History

| Source

| Diff

· /lams_central/web/addLesson.jsp

(-7, +4)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-9, +6)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessmcq.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessment.jsp

(-3, +1)

| History

| Source

| Diff

… 80 more files in changeset.