MDL-56992 core_scss: Don't allow invalid files to be included
authorAnkit Agarwal <ankit@moodle.com>
Thu, 8 Dec 2016 06:03:55 +0000 (11:33 +0530)
committerDan Poltawski <dan@moodle.com>
Wed, 4 Jan 2017 11:33:57 +0000 (11:33 +0000)
commita76b0b8b85df3dace16867a1d33f232bd5e00d71
tree12192c910813fa0388f8bf4ce9128775204f9a63
parent6528ec35058dacc6ef574f1f90986ad3239b3793
MDL-56992 core_scss: Don't allow invalid files to be included

We allow only .scss files so allow files to be included only and only if they end in .scss and they exist on server under theme directory.
lib/classes/scss.php
lib/tests/scss_test.php [new file with mode: 0644]