Commit Graph

427 Commits

Author SHA1 Message Date
Ali Akbar
01b389b73a Merge pull request #221 from edx/IM/security-fixes-10
Incident Management Security Fixes 10
2021-02-08 17:46:16 +05:00
Ali-D-Akbar
33335cd65d PROD-2023 2021-02-04 10:21:39 +05:00
Ali-D-Akbar
810fd89be6 PROD-2022 2021-02-04 10:21:39 +05:00
Ali-D-Akbar
584ea0b614 PROD-2021 2021-02-04 10:21:39 +05:00
Ali-D-Akbar
2d9531e8d1 PROD-2020 2021-02-04 10:21:39 +05:00
Ali-D-Akbar
cace39bbc7 PROD-2016 2021-02-04 10:21:39 +05:00
Ali-D-Akbar
fd7c526c76 PROD-2001 2021-02-04 10:20:25 +05:00
Ali-D-Akbar
551ec819fc PROD-2000 2021-02-04 10:20:25 +05:00
Ali-D-Akbar
bff5ac45e6 PROD-1998 2021-02-04 10:20:25 +05:00
Ali-D-Akbar
4c2f07e1ed PROD-1997 2021-02-04 10:20:25 +05:00
Ali-D-Akbar
afb31f8049 PROD-1993 2021-02-01 15:32:27 +05:00
azanbinzahid
469dc71f6d PROD-2003 2021-01-11 14:32:50 +05:00
azanbinzahid
3f1985361c PROD-1996 2021-01-11 14:32:50 +05:00
azanbinzahid
6e56d6e63c PROD-1994 2021-01-11 14:32:50 +05:00
azanbinzahid
98561cbae1 PROD-1937 2021-01-11 14:32:50 +05:00
azanbinzahid
39c0d96b14 PROD-1936 2021-01-11 14:32:50 +05:00
azanbinzahid
73a7ce0416 PROD-1935 2021-01-11 14:32:50 +05:00
Dillon Dumesnil
9e2eab506f AA-454 and AA-470: Update language and bug fix for highlights
Since Course Highlights aren't necessarily weekly (self-paced courses),
update the language to be more generic. And then includes a bug fix to
not send highlights to learners after they have unenrolled from a course.
2020-12-04 15:26:47 +00:00
Ali Akbar
ba96336307 Merge pull request #204 from edx/sustaining/security-fixes-6
Sustaining security fixes 6
2020-10-07 13:06:07 +05:00
Andytr1
b4f144ef62 EDUCATOR-5304 - update help text (#25264)
* EDUCATOR-5304 - update help text

* EDUCATOR-5304 - update help text - escape underscore

* EDUCATOR-5304 - update help text - escape underscore 2
2020-10-06 16:30:02 -04:00
SaadYousaf
c08006723a PROD-2124 2020-09-29 16:18:25 +05:00
SaadYousaf
a0147c269b PROD-2119 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
dbdecb1501 PROD-2121 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
e085de2230 PROD-2115 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
cba81270e2 PROD-2120 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
cdd3fe53dc PROD-2113 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
5ddc818fe4 PROD-2112 2020-09-29 16:18:25 +05:00
Ali-D-Akbar
edf5c88b8f disable xsslint 2020-09-17 16:34:17 +05:00
uzairr
8ba1d522df fix xss in transcript not found template
PROD-2017
2020-08-21 13:31:49 +05:00
uzairr
ffd585cfab fix xss in grading editor template
PROD-2024
2020-08-21 13:19:46 +05:00
uzairr
1c737b3dd9 fix xblock outline template
PROD-2019
2020-08-21 13:17:38 +05:00
uzairr
636240a400 fix xss in metadata template
PROD-2015
2020-08-21 13:11:43 +05:00
uzairr
ec5a1be52b fix xss in transcript replace template
PROD-2013
2020-08-21 13:08:43 +05:00
uzairr
4481908b02 fix xss in edit section template
PROD-2011
2020-08-21 13:06:35 +05:00
uzairr
57823e16dc fix xss in transcript import template
PROD-2018
2020-08-21 13:04:48 +05:00
uzairr
ef014f5d7f Fix xss in transcript upload template
PROD-2014
2020-08-21 13:00:30 +05:00
uzairr
103a4f20a6 Fix xss in transcript template
PROD-2012
2020-08-21 12:56:30 +05:00
uzairr
e890ec6dd5 Fix xss in team member template
PROD-2009
2020-08-21 12:52:27 +05:00
uzairr
643736e613 Fix xss in signatories templates
PROD-2010
2020-08-21 12:38:37 +05:00
uzairr
6887ab1c26 Fix xss in course handout template
PROD-2002
2020-08-21 12:36:08 +05:00
Kyle McCormick
4857bd5d1e Disable changing special exam type after release date (#24118)
* Disable changing special exam type after release date

Do some client-side validation to make sure that exams
that *are* or *ever were* special may not be changed
to a special exam type (other than the current one)
after release date.

MST-258

Co-authored-by: Zach Hancock <zhancock@edx.org>
2020-06-11 10:45:04 -04:00
Zainab Amir
770e7ea3ab Fix transcript status for VEDA videos (#23962) 2020-05-12 18:42:33 +05:00
Zainab Amir
87a1c06d4b Display encode and transcript status (#23919)
* Have separate column for transcript and encode status
* Display error message sent from VEM

PROD-1432
2020-05-12 16:12:07 +05:00
Zainab Amir
b172a2a68c Enable course updates for instructor led courses (#22422)
Currently there is no option to schedule bulk emails to be sent
out at a specific time for instructor led courses. It would reduce
the effort required to create an engaging course if instructor led
course teams had the option to turn on weekly highlight emails as
well.

PROD-575
2020-01-28 15:38:19 +05:00
Robert Raposa
2202545aec remove studio signin and signup pages
This completes the work started in https://github.com/edx/edx-platform/pull/19453
to use the LMS login and registration for Studio, rather than Studio
providing its own implementation.

LMS login/registration are being used for the following reasons:
1. LMS logistration properly handles all SSO integrations.
2. A single logistration is simpler to maintain and understand.
3. Allows Studio to work more like all other IDAs that use LMS
logistration.

The original switch to use LMS logistration for Studio also added the
toggle `DISABLE_STUDIO_SSO_OVER_LMS` to provide the community some
additional time for switching. This commit removes this toggle, which
at this point means all deployments will use the LMS logistration.

This change requires sharing cookies across LMS and Studio. Should that
prove to be a problem for certain Open edX instances, there are
discussions of possible alternative solutions.
See https://github.com/edx/edx-platform/pull/19845#issuecomment-559154256

Detailed changes:
* Fix some Studio links that still went to old Studio signin and signup.
* Remove DISABLE_STUDIO_SSO_OVER_LMS feature toggle.
* Remove old studio signin and signup pages and templates.
* Fix url name "login", which had different meanings for Studio and LMS.
* Use the following settings: LOGIN_URL, FRONTEND_LOGIN_URL,
FRONTEND_LOGOUT_URL, and FRONTEND_REGISTER_URL.
* Redirect /signin and /signup to the LMS logistration.
* Add custom metric `uses_pattern_library`.
* Add custom metric `student_activate_account`.
* Add Django Settings to allow /signin, /signup, and /login_post to be
disabled once ready.

This work also relates to ARCH-218 and DEPR-6.

ARCH-1253
2019-12-04 02:36:36 -05:00
Dave St.Germain
37aafb3fe6 Add in-context display name editor for units on the course outline.
For TNL-6938
2019-11-06 11:08:42 -05:00
Nick
d1ebd1294b Remove backtick typo in advanced_entry.underscore 2019-10-11 15:25:33 -04:00
Dave St.Germain
ea3232feac TNL-6920 Component Editor Efficiency Improvements
* Enlarges component modal for easier editing
* Allows display name to be edited in place
* Improves markdown button labeling
* Moves markdown cheatsheet to the edit modal, for quick reference
2019-09-26 09:34:14 -04:00
Nicholas D'Alfonso
039b7aed29 DISCO-1342 hide fields
hide course card image, course about page image, and course
display name when publisher flag is turned on
2019-09-19 11:56:00 -04:00
Awais Jibran
1a4eb7d2e8 Pervent reverse tabnabbing in edx platform 2019-08-28 16:08:34 +05:00