92449 Commits

Author SHA1 Message Date
Adrian Greeve
40f289f362 Merge branch 'MDL-64678-master' of git://github.com/damyon/moodle 2019-03-05 13:51:33 +08:00
Andrew Nicols
9aae08ac91 Merge branch 'MDL-64961-master' of https://github.com/sammarshallou/moodle 2019-03-05 13:24:17 +08:00
Andrew Nicols
06824731a4 Merge branch 'MDL-64981' of https://github.com/timhunt/moodle 2019-03-05 13:20:34 +08:00
Shamim Rezaie
c51a157755 MDL-64830 core_calendar: Do cap check on event edit form 2019-03-05 04:24:53 +01:00
Damyon Wiese
5d87464bc6 MDL-64651 comments: Do not send referrer
Use blanktarget option on all comments to prevent malicious links.
2019-03-05 04:24:53 +01:00
Viktor
898d5d05a0 MDL-62702 core_lib: fix broken verification signature 2019-03-05 04:24:53 +01:00
Mark Nelson
1a8b1f2724 MDL-62702 core_lib: updated the 'ltiprovider' readme_moodle.txt 2019-03-05 04:24:53 +01:00
Brendan Cox
d8a7e1f78d MDL-62702 core_lib: parameters in POST override other LTI values
This fixes an exploit where you could alter the 'Content-Type' of the
request and bypass the case-sensitive check 'strstr'. For example,
setting it to 'application/x-www-FORM-urlencoded'. However, changing
this to use 'stristr' was also not an acceptable approach as you
could also bypass it by setting the value to 'multipart/form-data'.
2019-03-05 04:24:53 +01:00
Ryan Wyllie
93dda3bfd3 MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
2019-03-05 04:24:53 +01:00
Luca Bösch
c430bed525 MDL-64706 theme_boost: Remove logo link in secure template 2019-03-05 04:24:53 +01:00
Jun Pataleta
b7d8cd0fc7 Merge branch 'MDL-64652-master' of git://github.com/andrewnicols/moodle 2019-03-05 11:14:04 +08:00
Adrian Greeve
10ed5197fd Merge branch 'MDL-64941-master' of https://github.com/MartinGauk/moodle 2019-03-05 11:08:27 +08:00
Andrew Nicols
62ce9e73c4 MDL-64652 mod_data: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab20d2606d MDL-64652 glossary: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
3ffbde1214 MDL-64652 forum: Use an inner join when fetching ratings 2019-03-05 10:12:22 +08:00
Andrew Nicols
9f3bf966c4 MDL-64652 rating: Add optional inner join option to sql 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab45aa735c MDL-64652 mod_forum: Performance improvement for provider
There are possibly some further improvements that can be made to:
- export_discussion_data
- export_all_posts
2019-03-05 10:12:22 +08:00
Andrew Nicols
e93b9cb56f Merge branch 'MDL-64967-master' of https://github.com/sammarshallou/moodle 2019-03-05 10:09:31 +08:00
Andrew Nicols
264fdc2cae Merge branch 'MDL-64886_master' of https://github.com/marxjohnson/moodle 2019-03-05 10:04:15 +08:00
Adrian Greeve
96ec5f03f7 Merge branch 'MDL-64863-master' of git://github.com/damyon/moodle 2019-03-05 09:55:25 +08:00
Jun Pataleta
ba77f20bd0 Merge branch 'MDL-62143-master' of git://github.com/damyon/moodle 2019-03-05 09:44:59 +08:00
Damyon Wiese
a0e3d29fcf MDL-64678 assign: More ios touch
Only disable touch scrolling when the touch event is within the drawing region of the canvas.
2019-03-05 08:42:31 +08:00
sam marshall
7ba1cadd41 MDL-64961 REST web service: Fatal error in error handler 2019-03-01 11:57:00 +00:00
Tim Hunt
a0536c410a MDL-64981 dml tests: pgsql_native_recordset_testcase port number 2019-03-01 11:12:40 +00:00
Martin Gauk
3e24d6f663 MDL-64941 qtype_multianswer: keep order of existing wrapped questions 2019-03-01 09:46:40 +00:00
Eloy Lafuente (stronk7)
89d1238962 weekly release 3.7dev 2019-02-28 18:51:34 +01:00
Eloy Lafuente (stronk7)
82d8dd7188 Merge branch 'install_master' of https://git.in.moodle.com/amosbot/moodle-install 2019-02-28 18:51:31 +01:00
Eloy Lafuente (stronk7)
47d363f34f Merge branch 'MDL-60944_master-bump-mlbackend' of git://github.com/dmonllao/moodle 2019-02-28 11:51:57 +01:00
David Monllaó
18eb9a3733 MDL-60944 mlbackend_python: Bump python package version 2019-02-28 11:45:24 +01:00
Eloy Lafuente (stronk7)
b5940124dd Merge branch 'MDL-62631-master' of git://github.com/sarjona/moodle 2019-02-28 10:33:57 +01:00
Andrew Nicols
b73e2accbe Merge branch 'MDL-64376-master-2' of git://github.com/ryanwyllie/moodle 2019-02-28 11:45:27 +08:00
Ryan Wyllie
3accb67bcd MDL-64376 block_recentlyaccessedcourses: only centre courses on overflow
Only centre the courses in the div if they are overflowing the container
otherwise they should be left aligned.
2019-02-28 11:28:19 +08:00
Eloy Lafuente (stronk7)
3c1bb2334d Merge branch 'MDL-64444-master' of git://github.com/jleyva/moodle 2019-02-28 01:19:13 +01:00
Eloy Lafuente (stronk7)
daf358f0cd Merge branch 'MDL-64878-master' of git://github.com/damyon/moodle 2019-02-27 18:58:26 +01:00
Eloy Lafuente (stronk7)
ae5792807b Merge branch 'MDL-60944_master' of git://github.com/dmonllao/moodle 2019-02-27 18:46:44 +01:00
sam marshall
7514557426 MDL-64967 Behat: Mobile app testing does not load CSS files
Some files cannot be loaded due to CORS restrictions.
2019-02-27 14:56:05 +00:00
Sara Arjona
a0e20ce87c Merge branch 'MDL-64761-master' of git://github.com/dpalou/moodle 2019-02-27 15:36:18 +01:00
Mark Johnson
7d4c345820 MDL-64886 enrol: Make enrolledusercount optional in enrol_get_users_courses 2019-02-27 12:58:17 +00:00
Alexander Bias
0048e12f04 MDL-64903 block_myoverview: Cluster course filters 2019-02-27 13:46:47 +01:00
Sara Arjona
0ebfd1c47b Merge branch 'MDL-55135-master-competencies-manage-in-coursecontext' of https://github.com/wjroes/moodle 2019-02-27 11:51:30 +01:00
Sara Arjona
7afeb1b1d2 Merge branch 'MDL-62454-master' of git://github.com/bmbrands/moodle 2019-02-27 08:57:51 +01:00
Andrew Nicols
ec442a39dc Merge branch 'MDL-64889_master' of https://github.com/marxjohnson/moodle 2019-02-27 14:38:34 +08:00
Andrew Nicols
b4d689c8db Merge branch 'wip-master-MDL-62345' of https://github.com/adpe/moodle 2019-02-27 13:51:08 +08:00
Andrew Nicols
ccf03e1398 Merge branch 'MDL-63674-master' of git://github.com/rezaies/moodle 2019-02-27 13:01:08 +08:00
Andrew Nicols
3d122bd284 Merge branch 'MDL-63915_master' of git://github.com/markn86/moodle 2019-02-27 12:08:09 +08:00
Andrew Nicols
507d05f6e3 Merge branch 'MDL-64376-master-2' of git://github.com/ryanwyllie/moodle 2019-02-27 11:51:14 +08:00
Ryan Wyllie
42702e4186 MDL-63915 core_message: prevent drawer overriding index page widget
The module message_drawer_view_conversation.js is written in a way
where it keeps the conversation data as a static module variable.
It also does the same thing for the render function and generates it
when the conversation is shown, and only holds one instance as a static
module variable. This means which ever version of the messaging UI opens
second will override the first render function.
2019-02-27 11:35:36 +08:00
Ryan Wyllie
3e79a7bbe8 MDL-63915 core_message: fix view contacts loading only on one app 2019-02-27 11:35:36 +08:00
Mark Nelson
6f9d34bd46 MDL-63915 core_message: 'message' link on profile opens drawer 2019-02-27 11:35:36 +08:00
Mark Nelson
fd998fc6f0 MDL-63915 core_message: add the UI to the message/index.php page 2019-02-27 11:35:36 +08:00