92445 Commits

Author SHA1 Message Date
Andrew Nicols
06824731a4 Merge branch 'MDL-64981' of https://github.com/timhunt/moodle 2019-03-05 13:20:34 +08:00
Shamim Rezaie
c51a157755 MDL-64830 core_calendar: Do cap check on event edit form 2019-03-05 04:24:53 +01:00
Damyon Wiese
5d87464bc6 MDL-64651 comments: Do not send referrer
Use blanktarget option on all comments to prevent malicious links.
2019-03-05 04:24:53 +01:00
Viktor
898d5d05a0 MDL-62702 core_lib: fix broken verification signature 2019-03-05 04:24:53 +01:00
Mark Nelson
1a8b1f2724 MDL-62702 core_lib: updated the 'ltiprovider' readme_moodle.txt 2019-03-05 04:24:53 +01:00
Brendan Cox
d8a7e1f78d MDL-62702 core_lib: parameters in POST override other LTI values
This fixes an exploit where you could alter the 'Content-Type' of the
request and bypass the case-sensitive check 'strstr'. For example,
setting it to 'application/x-www-FORM-urlencoded'. However, changing
this to use 'stristr' was also not an acceptable approach as you
could also bypass it by setting the value to 'multipart/form-data'.
2019-03-05 04:24:53 +01:00
Ryan Wyllie
93dda3bfd3 MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
2019-03-05 04:24:53 +01:00
Luca Bösch
c430bed525 MDL-64706 theme_boost: Remove logo link in secure template 2019-03-05 04:24:53 +01:00
Jun Pataleta
b7d8cd0fc7 Merge branch 'MDL-64652-master' of git://github.com/andrewnicols/moodle 2019-03-05 11:14:04 +08:00
Adrian Greeve
10ed5197fd Merge branch 'MDL-64941-master' of https://github.com/MartinGauk/moodle 2019-03-05 11:08:27 +08:00
Andrew Nicols
62ce9e73c4 MDL-64652 mod_data: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab20d2606d MDL-64652 glossary: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
3ffbde1214 MDL-64652 forum: Use an inner join when fetching ratings 2019-03-05 10:12:22 +08:00
Andrew Nicols
9f3bf966c4 MDL-64652 rating: Add optional inner join option to sql 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab45aa735c MDL-64652 mod_forum: Performance improvement for provider
There are possibly some further improvements that can be made to:
- export_discussion_data
- export_all_posts
2019-03-05 10:12:22 +08:00
Andrew Nicols
e93b9cb56f Merge branch 'MDL-64967-master' of https://github.com/sammarshallou/moodle 2019-03-05 10:09:31 +08:00
Andrew Nicols
264fdc2cae Merge branch 'MDL-64886_master' of https://github.com/marxjohnson/moodle 2019-03-05 10:04:15 +08:00
Adrian Greeve
96ec5f03f7 Merge branch 'MDL-64863-master' of git://github.com/damyon/moodle 2019-03-05 09:55:25 +08:00
Jun Pataleta
ba77f20bd0 Merge branch 'MDL-62143-master' of git://github.com/damyon/moodle 2019-03-05 09:44:59 +08:00
Tim Hunt
a0536c410a MDL-64981 dml tests: pgsql_native_recordset_testcase port number 2019-03-01 11:12:40 +00:00
Martin Gauk
3e24d6f663 MDL-64941 qtype_multianswer: keep order of existing wrapped questions 2019-03-01 09:46:40 +00:00
Eloy Lafuente (stronk7)
89d1238962 weekly release 3.7dev 2019-02-28 18:51:34 +01:00
Eloy Lafuente (stronk7)
82d8dd7188 Merge branch 'install_master' of https://git.in.moodle.com/amosbot/moodle-install 2019-02-28 18:51:31 +01:00
Eloy Lafuente (stronk7)
47d363f34f Merge branch 'MDL-60944_master-bump-mlbackend' of git://github.com/dmonllao/moodle 2019-02-28 11:51:57 +01:00
David Monllaó
18eb9a3733 MDL-60944 mlbackend_python: Bump python package version 2019-02-28 11:45:24 +01:00
Eloy Lafuente (stronk7)
b5940124dd Merge branch 'MDL-62631-master' of git://github.com/sarjona/moodle 2019-02-28 10:33:57 +01:00
Andrew Nicols
b73e2accbe Merge branch 'MDL-64376-master-2' of git://github.com/ryanwyllie/moodle 2019-02-28 11:45:27 +08:00
Ryan Wyllie
3accb67bcd MDL-64376 block_recentlyaccessedcourses: only centre courses on overflow
Only centre the courses in the div if they are overflowing the container
otherwise they should be left aligned.
2019-02-28 11:28:19 +08:00
Eloy Lafuente (stronk7)
3c1bb2334d Merge branch 'MDL-64444-master' of git://github.com/jleyva/moodle 2019-02-28 01:19:13 +01:00
Eloy Lafuente (stronk7)
daf358f0cd Merge branch 'MDL-64878-master' of git://github.com/damyon/moodle 2019-02-27 18:58:26 +01:00
Eloy Lafuente (stronk7)
ae5792807b Merge branch 'MDL-60944_master' of git://github.com/dmonllao/moodle 2019-02-27 18:46:44 +01:00
sam marshall
7514557426 MDL-64967 Behat: Mobile app testing does not load CSS files
Some files cannot be loaded due to CORS restrictions.
2019-02-27 14:56:05 +00:00
Sara Arjona
a0e20ce87c Merge branch 'MDL-64761-master' of git://github.com/dpalou/moodle 2019-02-27 15:36:18 +01:00
Mark Johnson
7d4c345820 MDL-64886 enrol: Make enrolledusercount optional in enrol_get_users_courses 2019-02-27 12:58:17 +00:00
Alexander Bias
0048e12f04 MDL-64903 block_myoverview: Cluster course filters 2019-02-27 13:46:47 +01:00
Sara Arjona
0ebfd1c47b Merge branch 'MDL-55135-master-competencies-manage-in-coursecontext' of https://github.com/wjroes/moodle 2019-02-27 11:51:30 +01:00
Sara Arjona
7afeb1b1d2 Merge branch 'MDL-62454-master' of git://github.com/bmbrands/moodle 2019-02-27 08:57:51 +01:00
Andrew Nicols
ec442a39dc Merge branch 'MDL-64889_master' of https://github.com/marxjohnson/moodle 2019-02-27 14:38:34 +08:00
Andrew Nicols
b4d689c8db Merge branch 'wip-master-MDL-62345' of https://github.com/adpe/moodle 2019-02-27 13:51:08 +08:00
Andrew Nicols
ccf03e1398 Merge branch 'MDL-63674-master' of git://github.com/rezaies/moodle 2019-02-27 13:01:08 +08:00
Andrew Nicols
3d122bd284 Merge branch 'MDL-63915_master' of git://github.com/markn86/moodle 2019-02-27 12:08:09 +08:00
Andrew Nicols
507d05f6e3 Merge branch 'MDL-64376-master-2' of git://github.com/ryanwyllie/moodle 2019-02-27 11:51:14 +08:00
Ryan Wyllie
42702e4186 MDL-63915 core_message: prevent drawer overriding index page widget
The module message_drawer_view_conversation.js is written in a way
where it keeps the conversation data as a static module variable.
It also does the same thing for the render function and generates it
when the conversation is shown, and only holds one instance as a static
module variable. This means which ever version of the messaging UI opens
second will override the first render function.
2019-02-27 11:35:36 +08:00
Ryan Wyllie
3e79a7bbe8 MDL-63915 core_message: fix view contacts loading only on one app 2019-02-27 11:35:36 +08:00
Mark Nelson
6f9d34bd46 MDL-63915 core_message: 'message' link on profile opens drawer 2019-02-27 11:35:36 +08:00
Mark Nelson
fd998fc6f0 MDL-63915 core_message: add the UI to the message/index.php page 2019-02-27 11:35:36 +08:00
Mark Nelson
cb01c45c5d MDL-63915 core_message: add namespacing to messaging widget 2019-02-27 11:35:36 +08:00
Mark Nelson
7ece4ca9da MDL-63915 core_message: mark items that can be removed in MDL-63261 2019-02-27 11:35:36 +08:00
Mark Nelson
ee45ecc014 MDL-63915 core_message: remove use of renderable so we can nuke it
The other renderables in the same namespace are still used by
deprecated web services. Once we do the final deprecation of
those web services they will be removed - see MDL-63261.
2019-02-27 11:35:36 +08:00
Mark Nelson
b1bba555be MDL-63915 theme_bootstrapbase: removed unused CSS 2019-02-27 11:35:36 +08:00