1. 12 Feb, 2019 1 commit
  2. 30 Sep, 2018 1 commit
  3. 14 Aug, 2018 1 commit
    • Rebecca Blundell's avatar
      Bug 1752743: replace php 7.2 deprecated functions · c6c6c295
      Rebecca Blundell authored and Robert Lyon's avatar Robert Lyon committed
      replaced each() with foreach in core code.
      replaced create_function() with anonymous function in core code.
      Also removed some functions that were not used anymore
      Change-Id: I300396a1ec04c75d7882b7ec5c9de76c3763e70d
  4. 03 Sep, 2017 1 commit
  5. 12 Dec, 2016 1 commit
  6. 02 Sep, 2016 2 commits
  7. 15 Jul, 2016 1 commit
  8. 14 Apr, 2016 1 commit
  9. 31 Mar, 2016 4 commits
  10. 16 Dec, 2015 2 commits
  11. 24 Nov, 2015 1 commit
    • Aaron Wells's avatar
      Display icons for 3rd-party blocktypes plugins · 4f849ed2
      Aaron Wells authored
      Bug 1510421
      Defines a new static PluginBlocktype method, get_css_icon(), which
      fetches the name of the CSS icon to use for this blocktype. It returns
      false by default, which tells the theme to "fall back" to the old
      thumbnail.png instead. 3rd-party plugins can override this to
      specify a particular icon to use.
      All the core blocktypes have been refactored to extend
      MaharaCoreBlocktype, which uses the blocktype name as the name
      of the CSS icon to use. I also deprecated the "SystemBlocktype"
      class while I was at it.
      PluginBlocktype::get_blocktypes_for_category() now returns both
      the results of get_css_icon() and the thumbnail.png path, so that
      themes can decide which they want to use. (And of course
      thumbnail.png is served via thumbnail.php, so 3rd party themes
      can provide their own custom image files if they wish.)
      behatnotneeded: Requires installing third-party plugins to test
      Change-Id: Idb1ecfc7b21175913708e695788906c11133b0c0
  12. 22 Oct, 2015 1 commit
  13. 19 Oct, 2015 1 commit
  14. 23 Sep, 2015 1 commit
  15. 22 Sep, 2015 1 commit
  16. 08 Sep, 2015 1 commit
  17. 15 Jun, 2015 3 commits
  18. 15 Apr, 2015 1 commit
    • Robert Lyon's avatar
      Stopping SWF files XSS exploitation (Bug #1190788) · 8df9bdfa
      Robert Lyon authored
      By doing two things:
      1) Getting the embedded SWF object to set the
       allowscriptaccess = "never" and allownetworking = "never"
      2) By forcing a 'download file' link to actually download file
      - this goes for all files now that don't have embedded=1
      in their url.
      I've done it this way, having the embedded item have extra url param
      so that if a user tries to manipulate a url by removing params it
      will default to force download.
      I've merged the changes I'd done here https://reviews.mahara.org/#/c/3522/2
      and I've also cleaned up places where the download=1 was used as that is
      not needed now. Now if there are places where we need to embed rather
      than download we add the embedded=1 to the url.
      Change-Id: If5290a7c571d06d4178ef2ae5c4c09ed287403b4
      Signed-off-by: Robert Lyon's avatarRobert Lyon <robertl@catalyst.net.nz>
  19. 30 Mar, 2015 1 commit
  20. 12 Mar, 2015 1 commit
  21. 05 Feb, 2015 1 commit
  22. 04 Feb, 2015 1 commit
  23. 28 Jan, 2015 1 commit
    • Robert Lyon's avatar
      Don't expand the comment lists on page edit screen (Bug #1317343) · 1b663910
      Robert Lyon authored
      This was causing some problems with tagged posts
      - also hiding the 'add comment' link on page edit screen.
      And making the comments info show when no comments were on item and
      allow comments for artefact was enabled. This is an issue with newer
      versions of php.
      Also placing some of the template files in the new correct location
      Change-Id: I599e16b0899559a3ebcdf68cff53220b1d83f2d6
      Signed-off-by: Robert Lyon's avatarRobert Lyon <robertl@catalyst.net.nz>
  24. 03 Dec, 2014 1 commit
  25. 16 Nov, 2014 1 commit
  26. 29 Sep, 2014 1 commit
  27. 09 Sep, 2014 1 commit
  28. 01 Sep, 2014 1 commit
  29. 06 May, 2014 1 commit
    • Aaron Wells's avatar
      Upgrade flowplayer.audio to version 3.2.11 · 97e807a7
      Aaron Wells authored
      Bug 1316372: Also removing the flowplayer.audio source files, because
      they're not necessary to run Mahara, and we don't build it ourselves
      Change-Id: Ib64dbec723092486860a2fb37099b7918cfcb6a4
  30. 16 Oct, 2013 1 commit
    • Robert Lyon's avatar
      Overlay problems in block edit mode (bug 1240307) · 5665edfb
      Robert Lyon authored
      In Chrome - when editing a block when there is a nearby embedded media video
      block can cause the video part of the block to display over the config
      form making it hard to do editing.
      From what the interweb says this is a problem with wmode needing to be
      Change-Id: I8cd2a9c20ac2e14fe52274aeafeead96a7e94c17
      Signed-off-by: Robert Lyon's avatarRobert Lyon <robertl@catalyst.net.nz>
  31. 14 Oct, 2013 1 commit
  32. 07 Oct, 2013 1 commit
  33. 15 Feb, 2013 1 commit
    • Aaron Wells's avatar
      flowplayer: Updating flowplayer with custom build to disallow absolute URLs in config parameters · cbcdcfbc
      Aaron Wells authored
      Also updating to the latest version of flowplayer, and removing all the flowplayer source code
      files from the Mahara repo and instead referencing the separate github repo they can be DL'ed from.
      (The only 3 files actually used by flowplayer are flowplayer.swf, flowplayer.controls.swf, and the
      flowplayer.js file. The rest are only necessary if you want to compile.)
      The flowplayer GPL license requires that if we modify the source code and redistribute it,
      we must change the name to something not confusing with flowplayer. See "ADDITIONAL TERM per
      GPL Section 7", paragraphs 3 & 4.
      License files that don't apply to our distribution were also removed.
      Change-Id: I400266f7cfb0e560f6afcede65e10f4db626a43a
      Signed-off-by: Aaron Wells's avatarAaron Wells <aaronw@catalyst.net.nz>