Julia Hansbrough f351b05031 Fixing email link injection bug ...

Several templates used a variable set by the user (the request host header).  This led to a vulnerability where an attacker could inject their domain name into these templates (i.e., activation emails).  This patch fixes this vulnerability.

LMS-532

2013-12-18 13:38:36 -05:00

..

__init__.py

Added unit tests for safe_key() to resolve bug 392.

2013-05-06 17:26:18 -04:00

test_json_request.py

Use JsonResponse when it makes sense

2013-07-09 19:16:08 -04:00

test_memcache.py

Remove unused imports from common, as reported by pylint.

2013-06-19 16:56:34 -04:00

test_request.py

Fixing email link injection bug

2013-12-18 13:38:36 -05:00

test_sandboxing.py

add simple unit test on the defaulting of the settings

2013-07-11 14:31:53 -04:00

test_string_utils.py

Code review feedback.

2013-11-14 17:09:24 -05:00

test_submit_feedback.py

settings.MITX_FEATURES => settings.FEATURES

2013-12-03 15:34:55 -05:00