Robert Raposa 44bd65293a Escape json for Studio advanced settings ...

- Resolve SEC-27 by escaping course name in advanced settings
- Add escape_json_dumps to simplify escaping json in Mako templates

SEC-27: XSS/JS Error in Advanced Settings with invalid course name

2015-11-03 10:38:39 -05:00

..

tests

Bug fix: Added test cases and updated course info and index view with exception handling

2015-11-03 12:43:47 +05:00

__init__.py

New feature contribution: Entrance Exams

2015-01-15 20:35:24 -05:00

access.py

Refactor auth.has_access to auth.user_has_role

2015-07-19 20:42:29 -04:00

assets.py

Use Django 1.4 @ensure_csrf_cookie method PLAT-664

2015-06-06 08:48:36 -04:00

certificates.py

SOL-1224

2015-09-18 11:19:12 +05:00

checklist.py

Use Django 1.4 @ensure_csrf_cookie method PLAT-664

2015-06-06 08:48:36 -04:00

component.py

Revert "Decorated instructor dashboard with sudo_required."

2015-07-17 12:11:38 -04:00

course.py

Escape json for Studio advanced settings

2015-11-03 10:38:39 -05:00

dev.py

s/pylint: disable=W0613/pylint: disable=unused-argument/

2014-12-01 11:22:11 -05:00

entrance_exam.py

SOL-1292

2015-11-02 14:33:12 +05:00

error.py

s/pylint: disable=W0613/pylint: disable=unused-argument/

2014-12-01 11:22:11 -05:00

exception.py

New Feature: Certificates Web View

2015-06-01 19:48:04 -04:00

export_git.py

Use Django 1.4 @ensure_csrf_cookie method PLAT-664

2015-06-06 08:48:36 -04:00

helpers.py

use a generic function check if entrance_exam is enabled or not

2015-10-22 16:45:19 +05:00

import_export.py

SOL-1292

2015-11-02 14:33:12 +05:00

item.py

Merge pull request #9744 from edx/cdodge/timed-exams

2015-10-30 11:03:59 -04:00

library.py

Revert "Decorated instructor dashboard with sudo_required."

2015-07-17 12:11:38 -04:00

preview.py

Eliminate instances of unused-import Pylint violation

2015-07-13 17:33:25 -04:00

public.py

Add new clickjacking decorator that whitelists LTI consumers.

2015-10-07 11:20:51 -04:00

session_kv_store.py

Use strings instead of tuples as keys in SessionKeyValueStore

2014-09-24 15:17:46 -04:00

tabs.py

Eliminate instances of unused-import Pylint violation

2015-07-13 17:33:25 -04:00

transcripts_ajax.py

add name param check_transcripts

2015-06-12 16:34:45 +05:00

user.py

Revert "Decorated instructor dashboard with sudo_required."

2015-07-17 12:11:38 -04:00

videos.py

MA-844 Video Upload: remove dependency on AssetMetaDataStore.

2015-06-18 18:28:48 -04:00