Commit Graph

9424 Commits

Author SHA1 Message Date
uzairr
643736e613 Fix xss in signatories templates
PROD-2010
2020-08-21 12:38:37 +05:00
uzairr
6887ab1c26 Fix xss in course handout template
PROD-2002
2020-08-21 12:36:08 +05:00
Troy Sankey
3b6b066c72 Cleanup unused CONFIG_ROOT variable and dead code.
From what I've gleaned, CONFIG_FILE (and LMS_CFG and STUDIO_CFG
environment variables) supercedes CONFIG_ROOT.  There's no code anymore
that reads the value of the CONFIG_ROOT django setting, and in turn the
CONFIG_ROOT environment variable.

Tangentially related to DENG-369
2020-08-20 16:30:33 -04:00
Kyle McCormick
926a40def0 Enable ORGANIZATIONS_APP for devstack Studio (#24820)
It is already enabled in devstack LMS, stage LMS/Studio,
and prod LMS/Studio.

However, it is currently disabled in edge LMS/Studio,
and as far as I know, sandbox LMS/Studio as well as the
default Open edX LMS/Studio.

We would like to move towards enabling it globally by
default, and enabling it in devstack Studio would be
a first step towards that.
2020-08-20 12:19:39 -04:00
Dillon Dumesnil
d75fbde9e7 Merge pull request #24813 from edx/ddumesnil/xml-import-lcm-disable
Disable updating Library Content children during import
2020-08-20 09:10:42 -07:00
Dillon Dumesnil
79e96af197 Disable updating Library Content children during import 2020-08-20 07:26:27 -07:00
uzairr
7bc17c7dd9 Ratelimit the registration endpoint
PROD-880
2020-08-20 18:38:26 +05:00
Kyle McCormick
885627e14f Extend expiration of DEPRECATE_OLD_COURSE_KEYS_IN_STUDIO toggle (#24804)
TNL-7423
2020-08-19 09:53:14 -04:00
Ahtisham Shahid
5d38314fc5 Fixed xss lint issues for prod-1465/66 2020-08-19 13:59:36 +05:00
Ahtisham Shahid
e14e944e86 Fixed xsslinter issue for PROD-1527/28 2020-08-19 13:59:36 +05:00
Ali-D-Akbar
6d8e7dc81e PROD-1575 2020-08-18 17:32:49 +05:00
Ali-D-Akbar
71593b140c PROD-1535 2020-08-18 17:32:49 +05:00
Ali-D-Akbar
c788bb3bf8 PROD-1531 2020-08-18 17:32:49 +05:00
SaadYousaf
0bda30a393 fix issue with transcript dropdown. 2020-08-18 02:15:42 +05:00
alangsto
458b8b14ce added override settings for test (#24777) 2020-08-13 15:46:54 -04:00
alangsto
1f5b1e6c4d Removed waffle flag for proctoring backend advanced setting (#24606)
* remove waffle flag for proctoring providers

removed waffle flag

removed tests

updates for requested changes

corrected mistake

Add edX Django Rest Framework Extensions CSRF App URLS to Studio

MST-334 Make sure the CSRF hooks are in INSTALLED_APPS on Studio (#24607)

ENT-2894: Use new welcome template when redirected from enterprise proxy login view (#24587)

* using new welcome template when redirected from enterprise proxy login view

* enabling safe redirects to enterprise learner portal from login in devstack

* ading admin portal to login redirect whitelist

* running make upgrade to version bump edx-enterprise

fix(i18n): update translations

Updating Python Requirements

[REV-1257] Add upsell tracking for upgrading all programs button on program dashboard (#24589)

Added upsell tracking to the course upgrade all button on the program dashboard so we have a better understanding of when users are clicking our upsell links.

POST proctored exam settings (#24597)

allow blank escalation email (#24613)

[BD-10] Remove _uses_pattern_library property from EdxFragmentViews (#24536)

[BD-10] remove edx-pattern-library from JS bundles (#24165)

Co-authored-by: Sankar Raj <sankar.raj@crystaldelta.com>

Make the ExperimentWaffleFlag respect course masquerading when checking if it's active for a specific enrollment

[REV-1205] Add doc location comment so future devs can easily find it  (#24615)

AA-204: passing correct section information to frontend to complete outline portion of tab

AA-204: adding tests

AA-204: fixed up documentation and tests

[BD-10] Remove uses bootstrap method  (#24535)

Remove pattern library of certificate styles.

update search description on new search string (#24619)

* update search description on new search string

* disable xss-lint rule for jquery.html

make comment more general, to allow for future changes (#24618)

[BD-10] [DEPR-92] Remove pattern library of pavelib folder (#24591)

[BD-10] [DEPR-92] Remove directories that includes pattern-library. (#24602)

Add SSO Records endpoint for support tools

Bucket users regardless of enrollment in courseware MFE experiment

Updating Python Requirements

Change the default value of allow_proctoring_opt_out (#24626)

MST-333

ENT-3143: display message banner guiding user to their enterprise LP if enabled (#24625)

* display message banner guiding user to their enterprise LP if enabled

* adding new sass class name to use same styling as recovery email alert

Add "Source from library" XBlock

This lets the user import a block from a blockstore-based content library into a (modulestore based) course, by copying the block into the course.

Revert "[BD-10] [DEPR-92] Remove pattern library of certificate styles." (#24633)

Revert "[BD-10] [DEPR-92] Remove directories that includes pattern-library. (#24602)"

This reverts commit e4f28debb7.

Revert "[BD-10] [DEPR-92] Remove pattern library of pavelib folder (#24591)" (#24635)

This reverts commit 6980291d96.

allow plus or minus one (#24637)

geoip2: update maxmind geolite country database

fix keyerror with request.session (#24642)

* fix keyerror with request.session

* improve the conditional

AA-127: Created MFE Outline Tab Waffle Flag

Note: The team settled on raising a 404 when the waffle flag is disabled.
Upon receiving the 404, the frontend will redirect to the LMS.

Fixes session caching for enterprise portal links by only caching for auth'd learners

BUG: fixes for saml provider config/data lookup

Fix xss in edit member template

Fix xss while rendering file-upload

Fix xss in date

Fix xss in base site template

* revert

* removed from test_views
2020-08-13 11:37:17 -04:00
Aura Milena Alba
0192de00b2 [BD-10] [DEPR-92] Remove scss files that use pattern library 2020-08-12 13:12:36 -04:00
edx-pipeline-bot
a64970de74 Merge pull request #24760 from edx/private_to_public_8df43bd
Mergeback PR from private to public.
2020-08-12 17:38:12 +05:00
Manjinder Singh
c76ed6ae45 Extracting plugin app from edx-platform (#24678)
* Moving plugins infrastructure to edx-django-utils
This PR extracts the code that enables plugins in edx-platform and puts it in edx-django-utils. This is done to allow other IDAS to add plugin functionality.
2020-08-12 07:48:53 -04:00
Ali Akbar
8df43bd201 Merge pull request #194 from edx/aakbar/PROD-1534
PROD-1534 security fixes
2020-08-12 12:30:25 +05:00
Ali Akbar
fb94f09bea Merge pull request #186 from edx/sustaining/security-fixes-2
Sustaining/security fixes 2
2020-08-12 12:30:14 +05:00
Zia Fazal
601dc79ded Merge pull request #24743 from edx/ziafazal/e2e-tests-devstack
[BD-18] Disable django debug toolbar when running e2e tests
2020-08-12 09:51:47 +05:00
Aura Milena Alba
39900f052c [BD-10] Remove uses of variable uses_pattern_library (#24628) 2020-08-11 09:57:12 -04:00
SaadYousaf
0631b4bc97 PROD-1529 2020-08-11 17:48:57 +05:00
SaadYousaf
00a4e1b8d7 PROD-1526 2020-08-11 17:48:57 +05:00
SaadYousaf
e1a5672411 PROD-1292 2020-08-11 17:48:57 +05:00
SaadYousaf
5f9d41b124 PROD-1290 2020-08-11 17:48:57 +05:00
edX Transifex Bot
0dbfcbbf3b fix(i18n): update translations 2020-08-09 17:38:49 -04:00
Adolfo R. Brandes
455dd9db4c New library authoring MFE toggle 2020-08-07 09:22:01 -04:00
Adolfo R. Brandes
dff0e2a564 Clean up CORS-related settings 2020-08-07 09:22:01 -04:00
DawoudSheraz
12f2e6eb2b remove percentage field from VEM pipeline config model 2020-08-07 10:25:52 +05:00
zia.fazal@arbisoft.com
03d788e1c3 Changes to run e2e test on devstack 2020-08-07 09:55:47 +05:00
Dave St.Germain
f259c91efb This upgrades XBlock, which now contains a default index_dictionary method. 2020-08-06 15:56:48 -04:00
Binod Pant
b14772055c Canvas integrated_channel from enterpise v3.4.40 (#24699) 2020-08-06 12:25:44 -04:00
Michael Roytman
2e4bfecc6c Merge pull request #24663 from edx/mroytman/MST-345-proctoring-escalation-email-empty
mroytman/mst 345 proctoring escalation email empty
2020-08-05 11:33:25 -04:00
Michael Roytman
5b4527097b change proctoring_escalation_email serializer to not be required and to allow null to better align with the underlying data model and use case 2020-08-04 13:16:44 -04:00
alangsto
f37161c4ee prevent changes to settings via POST (#24665)
prevent changes to settings via POST

prevent changes to settings via POST

updated test name

updated based on feedback

removed comments
2020-08-03 16:56:30 -04:00
Uzair Rasheed
bad3b29b6c Merge pull request #189 from edx/security-fix/fix-xss-basesite
Fix xss in base site template
2020-07-30 10:59:53 +05:00
Ali-D-Akbar
0c67645d7f PROD-1534 2020-07-30 02:12:40 +05:00
Adam Butterworth
0e0c9887b1 Revert "[BD-10] [DEPR-92] Remove directories that includes pattern-library. (#24602)"
This reverts commit e4f28debb7.
2020-07-29 14:56:49 -04:00
David Ormsbee
7561fe751c Merge pull request #24385 from open-craft/mavidser/source-from-library-xblock
[BD-14]"Source from Library" XBlock
2020-07-29 12:14:48 -04:00
Ali-D-Akbar
ff2bf588eb PROD-1525 2020-07-29 14:48:50 +05:00
Ali-D-Akbar
8f12875e4a PROD-1530 2020-07-29 14:48:50 +05:00
Ali-D-Akbar
6905f64aa3 PROD-1289 2020-07-29 14:48:50 +05:00
SaadYousaf
a9cf0d84ac PROD-1619 2020-07-29 14:48:50 +05:00
Ali-D-Akbar
8876e7bf25 PROD-1603 2020-07-29 14:48:50 +05:00
Ali-D-Akbar
4d0c491259 PROD-1612 2020-07-29 14:48:50 +05:00
Ali-D-Akbar
d73b41f578 PROD-1605 2020-07-29 14:48:50 +05:00
Aura Milena Alba
e4f28debb7 [BD-10] [DEPR-92] Remove directories that includes pattern-library. (#24602) 2020-07-28 10:21:30 -04:00
morenol
68d1c7f78c [BD-10] Remove _uses_pattern_library property from EdxFragmentViews (#24536) 2020-07-27 12:01:40 -04:00