92582 Commits

Author SHA1 Message Date
Damyon Wiese
5d87464bc6 MDL-64651 comments: Do not send referrer
Use blanktarget option on all comments to prevent malicious links.
2019-03-05 04:24:53 +01:00
Viktor
898d5d05a0 MDL-62702 core_lib: fix broken verification signature 2019-03-05 04:24:53 +01:00
Mark Nelson
1a8b1f2724 MDL-62702 core_lib: updated the 'ltiprovider' readme_moodle.txt 2019-03-05 04:24:53 +01:00
Brendan Cox
d8a7e1f78d MDL-62702 core_lib: parameters in POST override other LTI values
This fixes an exploit where you could alter the 'Content-Type' of the
request and bypass the case-sensitive check 'strstr'. For example,
setting it to 'application/x-www-FORM-urlencoded'. However, changing
this to use 'stristr' was also not an acceptable approach as you
could also bypass it by setting the value to 'multipart/form-data'.
2019-03-05 04:24:53 +01:00
Ryan Wyllie
93dda3bfd3 MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
2019-03-05 04:24:53 +01:00
Luca Bösch
c430bed525 MDL-64706 theme_boost: Remove logo link in secure template 2019-03-05 04:24:53 +01:00
Shamim Rezaie
3f4d7f805e MDL-63146 mod_quiz: Add userid param to mod_quiz calendar callbacks 2019-03-05 14:21:42 +11:00
Jun Pataleta
b7d8cd0fc7 Merge branch 'MDL-64652-master' of git://github.com/andrewnicols/moodle 2019-03-05 11:14:04 +08:00
Adrian Greeve
10ed5197fd Merge branch 'MDL-64941-master' of https://github.com/MartinGauk/moodle 2019-03-05 11:08:27 +08:00
Andrew Nicols
62ce9e73c4 MDL-64652 mod_data: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab20d2606d MDL-64652 glossary: Break LEFT JOINs to multiple INNER 2019-03-05 10:12:22 +08:00
Andrew Nicols
3ffbde1214 MDL-64652 forum: Use an inner join when fetching ratings 2019-03-05 10:12:22 +08:00
Andrew Nicols
9f3bf966c4 MDL-64652 rating: Add optional inner join option to sql 2019-03-05 10:12:22 +08:00
Andrew Nicols
ab45aa735c MDL-64652 mod_forum: Performance improvement for provider
There are possibly some further improvements that can be made to:
- export_discussion_data
- export_all_posts
2019-03-05 10:12:22 +08:00
Andrew Nicols
e93b9cb56f Merge branch 'MDL-64967-master' of https://github.com/sammarshallou/moodle 2019-03-05 10:09:31 +08:00
Andrew Nicols
264fdc2cae Merge branch 'MDL-64886_master' of https://github.com/marxjohnson/moodle 2019-03-05 10:04:15 +08:00
Adrian Greeve
96ec5f03f7 Merge branch 'MDL-64863-master' of git://github.com/damyon/moodle 2019-03-05 09:55:25 +08:00
Jun Pataleta
ba77f20bd0 Merge branch 'MDL-62143-master' of git://github.com/damyon/moodle 2019-03-05 09:44:59 +08:00
Damyon Wiese
be56aa864b MDL-64864 core_competency: Include course category
These courses are passed through to the course_summary_exporter which
requires a category id in each course record.
2019-03-05 08:52:17 +08:00
Damyon Wiese
a0e3d29fcf MDL-64678 assign: More ios touch
Only disable touch scrolling when the touch event is within the drawing region of the canvas.
2019-03-05 08:42:31 +08:00
Simey Lameze
866b21a22a MDL-64881 workshopallocation_scheduled: remove legacy function 2019-03-05 06:51:44 +08:00
Simey Lameze
f0e9b93569 MDL-64881 workshopallocation_scheduled: create a scheduled task 2019-03-05 06:51:40 +08:00
Simey Lameze
8c0f43c477 MDL-64881 mod_workshop: remove legacy workshop_cron() function 2019-03-05 06:35:35 +08:00
Simey Lameze
29bddab8c8 MDL-64881 mod_workshop: convert cron to scheduled task 2019-03-05 06:35:30 +08:00
AMOS bot
8bb161fce0 Automatically generated installer lang files 2019-03-04 00:09:35 +00:00
cescobedo
a57e09230f MDL-64342 core_message: make ajax call when privacy setting is changed
Only fire ajax request when the privacy setting value is changed.
2019-03-03 23:23:04 +01:00
Jun Pataleta
c1ff94f41e MDL-64774 user: Make email query case-insensitive 2019-03-01 23:29:00 +08:00
Jun Pataleta
2672f0366b MDL-64774 user: Better unit tests for updating users with similar emails 2019-03-01 23:29:00 +08:00
Amaia Anabitarte
75e7553aa3 MDL-64670 core_message: behat tests for group conversations
Co-authored-by: Mathew May <mathew@moodle.com>
Co-authored-by: Amaia Anabitarte <amaia@moodle.com>
2019-03-01 14:14:32 +01:00
Amaia Anabitarte
65f631c5bc MDL-64670 core_message: New steps and selectors for message drawer
Co-authored-by: Mathew May <mathew@moodle.com>
Co-authored-by: Amaia Anabitarte <amaia@moodle.com>
2019-03-01 14:14:32 +01:00
sam marshall
7ba1cadd41 MDL-64961 REST web service: Fatal error in error handler 2019-03-01 11:57:00 +00:00
Tim Hunt
a0536c410a MDL-64981 dml tests: pgsql_native_recordset_testcase port number 2019-03-01 11:12:40 +00:00
Martin Gauk
3e24d6f663 MDL-64941 qtype_multianswer: keep order of existing wrapped questions 2019-03-01 09:46:40 +00:00
Simey Lameze
4ce27477fb MDL-64882 repository_filesystem: deprecate legacy cron function 2019-03-01 11:12:55 +08:00
Simey Lameze
a8e38eb311 MDL-64882 repository_filesystem: convert cron to scheduled task 2019-03-01 11:12:46 +08:00
Simey Lameze
653842539c MDL-64882 repository_dropbox: deprecate legacy cron function 2019-03-01 10:43:18 +08:00
Simey Lameze
d77c810627 MDL-64882 repository_dropbox: convert cron to schedule task 2019-03-01 10:43:17 +08:00
Andrew Nicols
306ce452ab MDL-63366 core_privacy: Add coverage whitelisting 2019-03-01 10:30:31 +08:00
Andrew Nicols
14588631c0 MDL-63366 tool_dataprivacy: Add coverage whitelisting 2019-03-01 10:30:31 +08:00
Andrew Nicols
2c51b2eca0 MDL-63366 core: Add coverage whitelisting for filestorage 2019-03-01 10:30:31 +08:00
Andrew Nicols
0970aa10af MDL-63366 core_phpunit: Add ability to specify coverage filters 2019-03-01 10:30:31 +08:00
Simey Lameze
942cc5b1da MDL-64884 auth_mnet: deprecate legacy cron() method 2019-03-01 10:01:41 +08:00
Simey Lameze
e425221ee6 MDL-64884 auth_mnet: convert cron to scheduled task 2019-03-01 10:01:37 +08:00
AMOS bot
8683c7f62a Automatically generated installer lang files 2019-03-01 00:15:34 +00:00
Dmitrii Metelkin
2085e8603a MDL-62869 search: implement searching for all courses 2019-03-01 07:18:37 +11:00
Luca Bösch
eb6a339fb7 MDL-64746 block_timeline: replace filter icon by sort icon. 2019-02-28 20:45:50 +01:00
Eloy Lafuente (stronk7)
89d1238962 weekly release 3.7dev 2019-02-28 18:51:34 +01:00
Eloy Lafuente (stronk7)
82d8dd7188 Merge branch 'install_master' of https://git.in.moodle.com/amosbot/moodle-install 2019-02-28 18:51:31 +01:00
David Mudrák
60f59e5599 MDL-64943 lang: Fix regressions in Behat caused by reworded strings 2019-02-28 17:23:01 +01:00
Eloy Lafuente (stronk7)
47d363f34f Merge branch 'MDL-60944_master-bump-mlbackend' of git://github.com/dmonllao/moodle 2019-02-28 11:51:57 +01:00