moodle/lib
Brendan Cox d8a7e1f78d MDL-62702 core_lib: parameters in POST override other LTI values
This fixes an exploit where you could alter the 'Content-Type' of the
request and bypass the case-sensitive check 'strstr'. For example,
setting it to 'application/x-www-FORM-urlencoded'. However, changing
this to use 'stristr' was also not an acceptable approach as you
could also bypass it by setting the value to 'multipart/form-data'.
2019-03-05 04:24:53 +01:00
..
adodb
ajax
amd Merge branch 'MDL-64376-master-2' of git://github.com/ryanwyllie/moodle 2019-02-27 11:51:14 +08:00
antivirus MDL-63276 upgrade: clean < 3.2.0 upgrade steps 2019-01-03 01:17:17 +01:00
behat Merge branch 'MDL-64967-master' of https://github.com/sammarshallou/moodle 2019-03-05 10:09:31 +08:00
bennu Merge branch 'MDL-62914-master' of git://github.com/lameze/moodle 2018-08-28 23:15:36 +02:00
classes MDL-60944 tool_analytics: Adding create and delete features 2019-02-25 09:54:07 +01:00
db Merge branch 'MDL-64093_master' of git://github.com/markn86/moodle 2019-02-21 09:46:54 +01:00
ddl MDL-63020 ddl: fix nullable unique indexes in OCI and MS SQL 2018-09-20 17:41:22 +01:00
dml MDL-63020 tests: ensure that searching for is null values also works ok 2018-09-24 17:38:10 +02:00
dtl
editor Merge branch 'MDL-64200-master' of git://github.com/damyon/moodle 2019-02-20 15:57:55 +01:00
evalmath MDL-64414 lib/evalmath: add AND, OR functions to evalmath 2018-12-18 09:40:29 +01:00
external
filebrowser MDL-63103 filebrowser: Speed up finding activities with files 2019-01-11 08:58:39 +00:00
filestorage MDL-60819 core_files: fix exception thrown from generate_image_thumbnail 2018-06-11 10:44:51 +08:00
fonts
form Merge branch 'MDL-55211-master' of git://github.com/damyon/moodle 2019-02-18 09:34:43 +01:00
geopattern-php MDL-61657 block_myoverview: implement course images for the myoverview block 2018-04-23 23:21:06 +02:00
google
grade MDL-64878 grades: Rebuild cache on import 2019-02-27 10:37:31 +08:00
horde MDL-63422 lib: horde - review core loop / switch / case / continue 2018-10-31 00:17:59 +01:00
html2text
htmlpurifier
jabber MDL-64223 libraries: PHP7.1 compatibility fixes for Jabber lib 2018-11-27 16:40:35 +08:00
jquery MDL-62491 core_privacy: Add html files to the user data export. 2018-10-08 09:00:08 +08:00
lessphp MDL-62294 lib: Take note of cherry-picked upstream commit 2018-11-07 17:25:03 +01:00
ltiprovider MDL-62702 core_lib: parameters in POST override other LTI values 2019-03-05 04:24:53 +01:00
markdown
maxmind
minify
mlbackend MDL-60944 mlbackend_python: Bump python package version 2019-02-28 11:45:24 +01:00
mustache
pear MDL-62947 core_form: fix remote code execution exploit in QuickForms 2018-09-05 12:12:19 +08:00
php-css-parser
phpexcel
phpmailer MDL-63967 libs: some filter_var() filters are deprecated with php73 2019-02-01 11:56:05 +01:00
phpunit MDL-64599 phpunit: Fix typo in arraydataset 2019-01-18 07:07:25 +10:00
portfolio MDL-62233 portfolio: check caller parent class 2018-05-10 09:13:03 +08:00
requirejs MDL-64684 javascript: Do not minify jQuery+requireJS in dev mode 2019-01-24 09:28:21 +08:00
rtlcss
scssphp MDL-61529 core: update lib scssphp to version 0.7.5 2018-03-16 10:36:40 +01:00
simplepie
spout
tcpdf MDL-63422 lib: tcpdf - review core loop / switch / case / continue 2018-10-31 00:17:59 +01:00
templates Merge branch 'MDL-62143-master' of git://github.com/damyon/moodle 2019-03-05 09:44:59 +08:00
testing MDL-62514 behat: Remove potentially conflicting names from description 2019-01-30 08:24:32 +08:00
tests MDL-64706 theme_boost: Remove logo link in secure template 2019-03-05 04:24:53 +01:00
typo3 MDL-63967 libs: some filter_var() filters are deprecated with php73 2019-02-01 11:56:05 +01:00
userkey MDL-64737 privacy: Fix privacy provider testsuite file names 2019-01-31 11:31:57 +01:00
xhprof MDL-63031 administration: Allow plugins to define trace storage 2018-08-13 21:54:48 -06:00
xmldb MDL-63020 xmldb: Improve PHPdoc comments for better IDE autocomplete 2018-09-20 17:41:22 +01:00
yui MDL-60207 javascript: remove click handler in YUI modal initialiser 2018-05-29 10:05:00 +08:00
yuilib
accesslib.php MDL-61441 accesslib: get_users_by_capability groups perf improvement 2019-01-11 11:26:41 +00:00
adminlib.php MDL-52167 admin: display dependencies in search results 2019-02-26 15:45:53 +01:00
authlib.php MDL-40613 auth_ldap: removed usage of profile_load_custom_fields() 2018-01-03 18:13:01 +08:00
badgeslib.php MDL-63973 core_badges: related badges query now works both ways 2018-11-19 11:08:00 +08:00
blocklib.php MDL-59629 mod_block: Set the default region in add_region 2018-12-14 10:29:10 +08:00
boxlib.php
cacert.pem
cacert.txt
clilib.php
completionlib.php MDL-37933 core_complete: fixed criteria/criterion naming confusion 2017-11-27 15:26:43 +08:00
componentlib.class.php
conditionlib.php
configonlylib.php
cookies.js
coursecatlib.php MDL-62742 core: rename coursecat->core_course_category 2018-08-28 11:36:23 +02:00
cronlib.php Merge branch 'MDL-64454-master' of https://github.com/sammarshallou/moodle 2019-02-06 22:26:44 +01:00
csslib.php
csvlib.class.php
customcheckslib.php
dataformatlib.php MDL-60443 dataformat lib: Change a wrong variable name 2017-12-06 19:53:34 +13:00
datalib.php MDL-36255 core_grade: fix to ensure correct context used for filters 2018-08-22 17:55:50 +08:00
ddllib.php
default.ttf
deprecatedlib.php MDL-63211 core_message: deprecated functions and added new API 2018-10-03 11:35:26 +08:00
dmllib.php MDL-59581 database: remove mssql references from lib/ files 2018-04-09 02:00:09 +02:00
dtllib.php
editorlib.php
emptyfile.php
enrollib.php MDL-63457 block_myoverview: Update getters for enrolled courses 2018-10-29 08:36:59 +08:00
environmentlib.php MDL-63421 env: Moodle 3.4.x and 3.5.x do not support PHP 7.3 2018-10-05 13:36:26 +02:00
excellib.class.php MDL-51419 core_files: Support for utf8 in file names in MS Edge 2018-06-22 10:29:23 +08:00
externallib.php MDL-63225 webservice: Return proper debuginfo on WS exceptions 2018-10-02 13:14:33 +02:00
filelib.php MDL-27520 core_grades: make constant names clearer 2018-10-17 15:57:27 +08:00
filterlib.php MDL-64012 filters: activity name autolinking fails for names with () 2018-11-14 16:04:31 +00:00
flickrclient.php
flickrlib.php
formslib.php Merge branch 'MDL-55211-master' of git://github.com/damyon/moodle 2019-02-18 09:34:43 +01:00
gdlib.php
googleapi.php
gradelib.php MDL-64609 gradebook: Prevent infinite loop in regrading 2019-01-22 21:40:12 -05:00
graphlib.php
grouplib.php MDL-64521 grouplib: reduce memory use in groups_get_all_groups 2019-01-22 16:42:18 +00:00
index.html
installlib.php MDL-62777 Administration: CLI upgrade new setting notification 2018-10-22 14:28:06 +11:00
javascript-static.js MDL-63714 javascript: Improve docs for pendingjs 2018-10-24 08:00:00 +08:00
javascript.php
jslib.php
ldaplib.php
lexer.php
licenselib.php
listlib.php MDL-61557 Lib: Add get_top_level_parent_id function 2018-03-05 13:34:08 +11:00
mathslib.php MDL-14274 lib/evalmath: support of conditional math in formulas. 2018-06-26 10:25:44 +02:00
messagelib.php MDL-63724 core_message: move message redirection into helper function 2018-11-12 10:09:27 +08:00
modinfolib.php MDL-41507 core_group: Consistent default value for FEATURE_GROUPS 2018-12-12 14:03:45 +11:00
moodlelib.php MDL-63786 core: set $CFG->forceclean for logged in as sessions 2019-03-05 04:24:53 +01:00
myprofilelib.php MDL-60548 profile: Show profile email when 'maildisplay' allows it. 2018-01-15 12:21:09 +00:00
navigationlib.php MDL-62345 navigation: Change data-key for dashboard rootnode 2019-02-22 16:52:05 +01:00
oauthlib.php MDL-63696 oauth2: Store system account access tokens in DB 2018-11-16 11:43:16 +01:00
odslib.class.php
outputactions.php
outputcomponents.php Merge branch 'MDL-62680-master' of git://github.com/damyon/moodle 2019-02-07 10:23:39 +01:00
outputfactories.php
outputfragmentrequirementslib.php
outputlib.php MDL-62968 Boost: Adding editor SCSS support 2019-01-02 13:35:19 +08:00
outputrenderers.php Merge branch 'MDL-62143-master' of git://github.com/damyon/moodle 2019-03-05 09:44:59 +08:00
outputrequirementslib.php MDL-64684 javascript: Do not minify jQuery+requireJS in dev mode 2019-01-24 09:28:21 +08:00
pagelib.php MDL-61601 cohort: Add theme support for cohorts 2018-04-06 08:28:01 +02:00
pdflib.php
phpminimumversionlib.php MDL-63276 install: PHP min version checker bump to PHP 7.1 2019-01-03 01:17:17 +01:00
plagiarismlib.php
portfoliolib.php MDL-62233 portfolio: check caller parent class 2018-05-10 09:13:03 +08:00
questionlib.php MDL-63809 question: handling bad questions in question_has_capability_on 2018-12-18 15:05:37 +11:00
recaptchalib.php
recaptchalib_v2.php MDL-63940 recaptcha: Use www.recaptcha.net in the service endpoint URL 2018-11-08 22:55:33 +01:00
requirejs.php
resourcelib.php
rsslib.php
searchlib.php
sessionkeepalive_ajax.php
sessionlib.php
setup.php MDL-55188 events: First deprecation of eventslib.php 2018-07-30 09:23:54 +08:00
setuplib.php MDL-57898 core: Bump $lastmajordbchanges to trigger upgrade immediately 2019-01-22 09:36:15 +08:00
soaplib.php
statslib.php MDL-58596 core_stats: fixed infinite loop cause by DST change 2019-01-08 07:37:42 +00:00
tablelib.php MDL-49399 core: Add ability to specify a header col 2019-01-15 07:55:36 +08:00
thirdpartylibs.xml MDL-61657 block_myoverview: implement course images for the myoverview block 2018-04-23 23:21:06 +02:00
tokeniserlib.php
upgrade.txt MDL-64652 rating: Add optional inner join option to sql 2019-03-05 10:12:22 +08:00
upgradelib.php MDL-62777 Administration: CLI upgrade new setting notification 2018-10-22 14:28:06 +11:00
uploadlib.php
validateurlsyntax.php
webdavlib.php
weblib.php MDL-21475 weblib: Simplify validate_email() to use existing function. 2019-02-19 10:51:21 +10:00
wiki_to_markdown.php
womenslib.php
wordlist.txt
xhtml.xsl
xmlize.php MDL-61619 core: use empty string instead of null in xmlize 2018-03-12 11:12:00 +08:00
xsendfilelib.php