Commits · 4e73f30ba054bf132d66edea1bb7cae5679d87dd · mahara / mahara · GitLab

04 Jul, 2010 20 commits
- Move image block output to template · 4e73f30b
  Richard Mansfield authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  4e73f30b
- Turn on auto_escape in more templates · 2795f939
  Richard Mansfield authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  2795f939
- Use template for output from filedownload block · 76e5d0c7
  Richard Mansfield authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  76e5d0c7
- Turn on auto_escape in remaining admin templates · 1a07d3b2
  Richard Mansfield authored May 14, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  1a07d3b2
- Fix some admin templates to use auto_escape · d55436b4
  Richard Mansfield authored May 12, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  d55436b4
- Escape remote host display name in submitted view message · 865c15f0
  Richard Mansfield authored May 12, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  865c15f0
- Escape group name in 'view submitted to...' on my views page · b090cf71
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  b090cf71
- Run clean_html over view descriptions on view view page · 3ba5b1f5
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  3ba5b1f5
- Run clean_html over view descriptions on my views page · 75b85bbe
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  75b85bbe
- Escape comment author's name in comments; turn auto_escape off in comment list · c02b19aa
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  c02b19aa
- Escape user's name in user stats page · 7ce0257f
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  7ce0257f
- Escape view owner name in microheader title · 490202cf
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  490202cf
- Escape admin's name in masquerade string · 4b059b0f
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  4b059b0f
- Turn on auto_escape for user/view.tpl · 0ea122d7
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  0ea122d7
- Fix admin user search template for auto_escape · aaaf9cb0
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  aaaf9cb0
- Fix eval'ed templates in admin/users/search.php for auto_escape · 4f00758d
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  4f00758d
- Cast an ID coming from user data before it hits a query · 08d8b8b1
  Francois Marier authored May 25, 2010
```
This is a security fix (SQL injection).

Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  08d8b8b1
- htmlpurifier: update README.Mahara after 4.1.0 upgrade · 6a0d658d
  Francois Marier authored May 18, 2010
```
We can drop our only patch since the Youtube /cp/ issue was fixed upstream.

Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  6a0d658d
- htmlpurifier: new upstream release (4.1.0) · 4fbe4b17
  Francois Marier authored May 18, 2010
```
This release includes a security fix for an exploitable XSS attack
under Internet Explorer only.

There is no CVE number for this, but it's Secunia Advisory SA39613:

  http://secunia.com/advisories/39613/



Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  4fbe4b17
- Pieforms: escape value of 'collapseifone' select element option · ef1e1bb1
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  ef1e1bb1
01 Jul, 2010 7 commits
- Add checkbox for overall view setting to moderate comments and hide it when comments are disabled · 81c918ec
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  81c918ec
- Fix warning in logs & use better variable name · 5bf27f6d
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  5bf27f6d
- Fix view_search (broken for group views by 9fedce81) · 5e30b486
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  5e30b486
- Fix for overzealous moderation · f6d2e379
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  f6d2e379
- Add note to comment form when moderated; set moderated comments to private and... · d90afcb5
  Richard Mansfield authored Jul 01, 2010
```
Add note to comment form when moderated; set moderated comments to private and notify the view owner to moderate

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  d90afcb5
- Add function to get comment redirect url · 8aa40aa3
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  8aa40aa3
- Disable the moderate checkbox when comments are not allowed · b7eecf56
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  b7eecf56
30 Jun, 2010 13 commits
- Change string to 'Moderate' and use less space for comment checkboxes · 6894c876
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  6894c876
- Add approvecomments property to view,artefact classes · 07340b03
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  07340b03
- Fix query for group view access · 035acc2c
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  035acc2c
- Insert tutor access records for submitted views in upgrade · c501d655
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  c501d655
- Uncomment drop table commands · a5f955ce
  Richard Mansfield authored Jul 01, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  a5f955ce
- Check view access records before displaying the comment form · 8bbeef80
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  8bbeef80
- Check the correct comment boxes on view access · 3f54a465
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  3f54a465
- Simplify can_view_view to get all relevant access records · 645a8aaa
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  645a8aaa
- Create hidden tutor access records for views submitted to groups, so that the... · ea8b4809
  Richard Mansfield authored Jun 30, 2010
```
Create hidden tutor access records for views submitted to groups, so that the normal view access system can be used

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  ea8b4809
- Show comment checkboxes on load of view access page with comments turned off on the view · 8cc9d739
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  8cc9d739
- Fix viewacl element for new column names · fcc82604
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  fcc82604
- Make sure id is set for each access item · 50898d02
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  50898d02
- Update queries using view_access_group,view_access_usr,view_access_token · 0e2f1c39
  Richard Mansfield authored Jun 30, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  0e2f1c39