edx-platform

Files

Tim McCormack e0e03dec5f Use more appropriate hash when making tracking ID; document SECRET_KEY use (#26134 )

- Make it easier to rotate `SECRET_KEY` by documenting this usage
  for both sensitivity and rotation process. (ARCHBOM-1676).
- Just use a hash of the secret rather than HMAC + MD5. We're not
  authenticating a message, so HMAC isn't really needed -- it just needs
  to be unique, deterministic, and irreversible. SHAKE allows generation
  of an arbitrary length hash without needing to truncate.

Also, rename tracking session ID generator for clarity -- there's no
encryption happening here.

Add additional test for existing claim of uniqueness.

2021-01-27 14:13:42 +00:00

djangoapps

Use more appropriate hash when making tracking ID; document SECRET_KEY use (#26134 )

2021-01-27 14:13:42 +00:00

lib

import task decorator from celery APP instance in CMS (#25953 )

2021-01-27 18:35:11 +05:00

static

Merge pull request #216 from edx/IM/security-fixes-7

2021-01-19 19:26:45 +05:00

templates

PROD-2245

2020-12-07 16:24:26 +05:00

test

Updating Bokchoy testing database cache

2021-01-25 10:37:56 -05:00

__init__.py

…

.gitignore

…

README.rst

…

README.rst

common
------

This directory contains common code shared between LMS and CMS, such as Mako templates, CSS, and Coffescript.