Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d75004265ceb414b453f923ebeb034ab085b1ad9
edx-platform/lms/templates
History
Adeel Khan 30d8dfb5dd Fix edx-platform templates for xss. 
This is part 2 of a multiple PR to escape
edx-platform templates to prevent xss attack.

PROD-465
2019-07-10 13:31:02 +05:00
..
admin
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
api_admin
updated effective date
2018-07-04 15:15:18 +05:00
calculator
TE-2702 Update Read the Docs links to HTTPS
2018-08-15 17:34:01 -04:00
ccx
Convert instructor email messages to ACE
2018-09-25 17:51:10 +03:00
certificates
TE-2702 Update Read the Docs links to HTTPS
2018-08-15 17:34:01 -04:00
class_dashboard
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
commerce
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
components
Updates to correct a header styling issue and to make the starting header level selectable
2017-03-20 08:37:33 -04:00
course_modes
update local currency code
2019-06-05 15:46:16 -04:00
courseware
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
credit_notifications
DOC-3822 Make 2 steps more obvious in credit eligible email
2017-11-15 15:15:13 -05:00
dashboard
Merge pull request #16496 from open-craft/josh/announcements-feature
2019-03-18 16:04:38 -04:00
debug
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
discovery
Remove old program detail page and Waffle switch gating the new page
2017-05-15 16:35:03 -04:00
discussion
SE-1151 Campus.il Inlines all 36 discussion underscore templates (#20742)
2019-07-08 11:26:43 -04:00
edxnotes
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
emails
Revert "Convert Account Activation Emails to edx-ACE"
2019-05-01 16:30:09 -04:00
embargo
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
enrollment
Fix recent enrollment message and multiple donation boxes.
2017-08-11 17:35:25 +05:00
experiments
REVEM-374 Remove course prices from dashboard (#20856)
2019-06-24 08:56:05 -04:00
fields
ENT-1115
2018-12-18 16:46:16 -05:00
financial-assistance
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
fragments
Implement theme admin UI to support previewing
2017-07-27 17:24:31 -04:00
header
Add analytics tracking to Discover New header link. (#20896)
2019-06-25 16:36:59 -04:00
instructor
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
learner_dashboard
Fix event tracking for pathway buttons.
2018-09-05 12:30:16 -04:00
modal
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
navigation
Removing the Deprecated the 'external_auth' package in favor of 'third_party_auth' which is the current recommendation.
2019-03-02 16:06:46 -05:00
oauth2_provider
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
peer_grading
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
provider
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
registration
Escape validation error messages on reset password page.
2018-09-13 16:28:52 +05:00
shoppingcart
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
static_templates
Added ability to change header and content of static pages in two ways.
2018-03-24 21:37:09 +01:00
student_account
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
support
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
survey
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
ux/reference
LEARNER-3128 add role=presentation to sequence nav list items
2017-12-06 08:38:56 -05:00
verify_student
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
widgets
Update edx.org theme to add new css rule
2019-04-22 14:15:16 +05:00
wiki
Fixes template for incorrect trans escaping.
2019-06-27 11:40:43 +05:00
_gated_content.html
added radio input fields to pre-requisite selection
2018-05-30 11:25:59 +05:00
.gitignore
…
.hgignore
…
annotatable.html
…
book_toc.xml
…
bookmark_button.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
conditional_ajax.html
…
conditional_module.html
Fix lms templates to prevent xss attacks.
2019-07-03 19:57:59 +05:00
course.html
Fix date format
2019-02-21 20:29:08 -04:00
courses_list.html
Fix search to show courses one time
2019-04-29 12:07:56 +05:00
dashboard.html
Flag added to load limited courses on Dashboard
2019-06-28 22:51:41 +05:00
edit_unit_link.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
email_change_failed.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
email_change_successful.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
email_exists.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
enroll_staff.html
add context to 'enroll' word
2018-02-13 11:56:54 +02:00
enroll_students.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
extauth_failure.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
feedback_email.txt
…
file-upload.underscore
…
footer.html
Mark alt text for translation
2019-05-30 07:40:23 -07:00
forgot_password_modal.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
header.html
Adding unified, responsive header.
2017-10-20 16:24:31 -04:00
help_modal.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
hidden_content.html
Revert "Merge pull request #14324 from edx/efischer/revertins"
2017-01-18 10:56:13 -05:00
identity.xml
…
index_overlay.html
Use PLATFORM_NAME on the home page
2019-05-22 17:39:00 -04:00
index_promo_video.html
Move default Promo Video html to themable file
2018-01-19 12:51:15 -08:00
index.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
invalid_email_key.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
library-block-author-preview-header.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
login-sidebar.html
Removing the Deprecated the 'external_auth' package in favor of 'third_party_auth' which is the current recommendation.
2019-03-02 16:06:46 -05:00
login.html
Fix lms templates to prevent xss attacks.
2019-07-03 19:57:59 +05:00
logout.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
lti_form.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
lti.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
main_django.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
main.html
Merge pull request #16496 from open-craft/josh/announcements-feature
2019-03-18 16:04:38 -04:00
manage_user_standing.html
Fix lms templates to prevent xss attacks.
2019-07-03 19:57:59 +05:00
module-error.html
Import Issue.
2017-11-02 15:01:17 -04:00
notes.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
page_banner.html
Fix content gating a11y issues
2018-12-03 23:26:47 -05:00
pdf_viewer.html
Allow zooming, fix button link.
2016-10-28 09:53:54 -04:00
poll.html
…
preview_menu.html
REVE-103: Fix masquerade for feature based enrollments
2018-12-03 12:05:00 -05:00
problem_ajax.html
Add FA loading spinner to each problem
2018-01-19 11:28:10 -08:00
problem_notifications.html
Changes for ui correctness state when saving a problem
2016-11-16 12:30:04 -05:00
problem.html
Move a message to make it extractable
2019-05-28 09:04:25 -04:00
provider_login.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
register-form.html
Fix edx-platform templates for xss.
2019-07-10 13:31:02 +05:00
register-shib.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
register-sidebar.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
register.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
resubscribe.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
secondary_email_change_failed.html
Verification by email of recovery address.
2018-12-27 18:51:55 +05:00
secondary_email_change_successful.html
Verification by email of recovery address.
2018-12-27 18:51:55 +05:00
seq_module.html
Augment content_type_gating tests to detect the failure case from the original REVMI-34 implementation
2019-05-16 15:17:33 -04:00
signup_modal.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
split_test_author_view.html
…
split_test_staff_view.html
…
split_test_student_view.html
…
staff_problem_info.html
Fix templates for xss.
2019-07-05 12:39:58 +05:00
static_htmlbook.html
Remove the annotations feature introduced by Harvard.
2018-07-16 16:55:08 -04:00
static_pdfbook.html
AC-530 fixing link-href ignores in the platform
2016-08-19 10:04:40 -04:00
staticbook.html
…
studio_render_children_view.html
…
studio_render_paged_children_view.html
…
sysadmin_dashboard_gitlogs.html
Fix lms templates to prevent xss attacks.
2019-07-03 19:57:59 +05:00
sysadmin_dashboard.html
Fix templates for XSS code injection via translations
2019-06-25 14:22:42 +05:00
tab_module.html
…
text-me-the-app.html
Create custom Text Me the App landing page.
2017-12-13 17:10:32 +05:00
tracking_log.html
…
unsubscribe.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
user_dropdown.html
s/django.core.urlresolvers/django.urls/g
2018-06-05 13:59:09 -04:00
using.html
…
vert_module.html
Add Content Type Gating Behind Waffle Flag
2018-10-31 12:34:48 -04:00
video_modal.html
…
video.html
Adds a course option to auto-advance videos.
2017-12-21 21:06:05 +10:30
word_cloud.html
Switch to dedicated student/author views.
2016-11-16 13:10:52 -05:00
xrds.xml
…