Fisheye on lams-github/lams_central/web/dialogCloser.jsp

lams-github (v4.7): LDEV-5257 Escape parameters to prevent XSS attack...

Marcin Cieslak — Mon, 30 Jan 2023 16:37:53 +0100

Marcin Cieslak committed 47dddf6 on branch v4.7, v4.8 in lams-github

LDEV-5257 Escape parameters to prevent XSS attack

WEB-005

· /lams_admin/web/WEB-INF/tags/Page.tag

(-3, +3)

| History

| Source

| Diff

· /lams_admin/web/organisation/deleteAllLessons.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_admin/web/userChangePass.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/WEB-INF/tags/Page.tag

(-3, +3)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/svgGenerator.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/createresult.jsp

(-4, +0)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessmentQTI.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/mcquestionQTI.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/dialogCloser.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/emailuser.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/extGroups.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/orgGroup.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_central/web/orgGrouping.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_central/web/passwordChangeContent.jsp

(-1, +1)

| History

| Source

| Diff

… 38 more files in changeset.

lams-github (v4.7): LDEV-4932 Add CSRF to monitor and central...

Andrey Balan — Tue, 31 Dec 2019 19:35:38 +0100

Andrey Balan committed ae4e7fd on branch v4.7, v4.8 in lams-github

LDEV-4932 Add CSRF to monitor and central

* Add CSRF protection to:

- Change lesson status (incl. remove)

- Remove lesson using main.jsp button

- Rename lesson

* Start using /common/taglibs.jsp in lams_central

· /lams_central/conf/security/Owasp.CsrfGuard.properties

(-0, +7)

| History

| Source

| Diff

· /lams_central/web/addLesson.jsp

(-5, +2)

| History

| Source

| Diff

· /lams_central/web/admin.jsp

(-6, +1)

| History

| Source

| Diff

· /lams_central/web/authoringConfirm.jsp

(-7, +1)

| History

| Source

| Diff

· /lams_central/web/common/taglibs.jsp

(-0, +8)

| History

| Source

· /lams_central/web/dialogCloser.jsp

(-2, +1)

| History

| Source

| Diff

· /lams_central/web/editLessonIntro.jsp

(-6, +1)

| History

| Source

| Diff

· /lams_central/web/error.jsp

(-5, +2)

| History

| Source

| Diff

· /lams_central/web/errorContent.jsp

(-7, +2)

| History

| Source

| Diff

· /lams_central/web/favoriteOrganisations.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/main.js

(-7, +7)

| History

| Source

| Diff

· /lams_central/web/index.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/main.jsp

(-6, +4)

| History

| Source

| Diff

· /lams_central/web/outcome/outcomeEdit.jsp

(-8, +2)

| History

| Source

| Diff

· /lams_central/web/outcome/outcomeManage.jsp

(-8, +3)

| History

| Source

| Diff

… 9 more files in changeset.

lams-github (v4.7): LDEV-2917: Use <!DOCTYPE html> everywhere.

Marcin Cieslak — Tue, 09 Feb 2016 19:53:33 +0100

Marcin Cieslak committed 2ef18e4 on branch v4.7, v4.8 in lams-github

LDEV-2917: Use everywhere.

· /TestHarness4LAMS2/template.html

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/import/status.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/openidConfig.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/template.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/timezoneServerManagement.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/toolcontent/learningLibraryGroup.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/addLesson.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmactualfolder.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmcreatefolder.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmfolders.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmresourceslist.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmresourcetype.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/filemanager/browser/default/frmupload.html

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/ckeditor/plugins/jlatexmath/jlatexmath.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/comments/comments.jsp

(-1, +1)

| History

| Source

| Diff

… 156 more files in changeset.

lams-github (v4.7): LDEV-3070: Fix few minor errors in Tools. Pass notifyCloseURL to proper authoring page in some Tools. Make generation of...

Marcin Cieslak — Thu, 25 Jul 2013 07:56:08 +0200

Marcin Cieslak committed dfe9ef3 on branch v4.7, v4.8 in lams-github

LDEV-3070: Fix few minor errors in Tools. Pass notifyCloseURL to proper authoring page in some Tools. Make generation of Tool content a non read-only operation as it starts a database transaction which is later used for writing.

· /lams_build/lib/lams/lams-central.jar

(binary)

| History

| Source

| Diff

· /lams_build/lib/lams/lams.jar

(binary)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/service/AuthoringService.java

(-4, +4)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/service/IAuthoringService.java

(-2, +2)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/web/AuthoringAction.java

(-2, +2)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/web/LamsAuthoringFinishAction.java

(-4, +4)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/HomeAction.java

(-2, +2)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/planner/PedagogicalPlannerAction.java

(-5, +4)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/tag/HelpTag.java

(-164, +163)

| History

| Source

| Diff

· /lams_central/web/authoringConfirm.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/dialogCloser.jsp

(-0, +10)

| History

| Source

· /lams_common/src/java/org/lamsfoundation/lams/integration/util/LoginRequestDispatcher.java

(-4, +3)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/toolApplicationContext.xml

(-1, +1)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/web/util/AttributeNames.java

(-0, +1)

| History

| Source

| Diff

· /lams_tool_assessment/web/pages/authoring/parts/overallfeedbacklist.jsp

(-2, +5)

| History

| Source

| Diff

… 8 more files in changeset.