Eloy Lafuente (stronk7) [Thu, 18 Jun 2015 17:04:10 +0000 (19:04 +0200)]
weekly release 2.6.11+
AMOS bot [Thu, 18 Jun 2015 16:04:21 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 16 Jun 2015 16:04:18 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 16 Jun 2015 16:04:17 +0000 (00:04 +0800)]
Automatically generated installer lang files
Simey Lameze [Thu, 28 May 2015 03:39:23 +0000 (11:39 +0800)]
MDL-50380 mod_wiki: fix missing parameter on wiki edit files page
Also fixing a typo on the $referer variable.
AMOS bot [Mon, 1 Jun 2015 16:04:25 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 29 May 2015 16:04:19 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 26 May 2015 16:04:03 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 22 May 2015 16:04:14 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Thu, 21 May 2015 16:04:01 +0000 (00:04 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Sun, 10 May 2015 09:39:05 +0000 (11:39 +0200)]
Moodle release 2.6.11
Frederic Massart [Wed, 6 May 2015 08:29:48 +0000 (16:29 +0800)]
MDL-50128 mod_data: String needed escaping before being used in regex
Marina Glancy [Tue, 5 May 2015 03:52:14 +0000 (11:52 +0800)]
MDL-49788 navigation: Ensure we only check active enrolments
Marina Glancy [Wed, 6 May 2015 04:32:07 +0000 (12:32 +0800)]
MDL-49718 externallib: unittest correction
Marina Glancy [Fri, 1 May 2015 14:21:43 +0000 (22:21 +0800)]
MDL-50090 user: suspended user can login upon conrimation
Juan Leyva [Mon, 13 Apr 2015 12:38:30 +0000 (14:38 +0200)]
MDL-49718 webservices: Fix forced format and force external text cleaning
Juan Leyva [Tue, 28 Apr 2015 10:30:17 +0000 (12:30 +0200)]
MDL-49994 files: Prevent to browse private files when are disabled
AMOS bot [Tue, 5 May 2015 16:04:14 +0000 (00:04 +0800)]
Automatically generated installer lang files
Marina Glancy [Sun, 3 May 2015 13:57:50 +0000 (21:57 +0800)]
MDL-50099 auth: less verbose account confirmed message
Frederic Massart [Thu, 5 Mar 2015 14:00:24 +0000 (15:00 +0100)]
MDL-49179 setuplib: print_error() uses local URLs exclusively
Frederic Massart [Wed, 4 Mar 2015 15:00:32 +0000 (16:00 +0100)]
MDL-49179 weblib: Secure the direct usage of $_SERVER['HTTP_REFERER']
Frederic Massart [Wed, 4 Mar 2015 11:11:08 +0000 (12:11 +0100)]
MDL-49179 mod_forum, mod_quiz: Prevent misuse of get_referer()
Tim Hunt [Tue, 21 Apr 2015 10:03:26 +0000 (11:03 +0100)]
MDL-49941 quiz: mod/quiz:grade should declare RISK_XSS
Frederic Massart [Thu, 5 Mar 2015 08:30:52 +0000 (09:30 +0100)]
MDL-49401 moodlelib: PARAM_LOCALURL supports loginhttps
AMOS bot [Mon, 27 Apr 2015 16:04:20 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 15 Apr 2015 16:04:12 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 13 Apr 2015 16:04:22 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 7 Apr 2015 16:04:21 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 23 Mar 2015 16:06:39 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Sun, 22 Mar 2015 16:04:25 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 20 Mar 2015 16:04:14 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Thu, 12 Mar 2015 16:04:19 +0000 (00:04 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Mon, 9 Mar 2015 23:42:29 +0000 (00:42 +0100)]
Moodle release 2.6.10
Eloy Lafuente (stronk7) [Mon, 9 Mar 2015 15:47:38 +0000 (16:47 +0100)]
weekly release 2.6.9+
Marina Glancy [Mon, 9 Mar 2015 03:19:59 +0000 (11:19 +0800)]
MDL-49418 core: partial revert of MDL-48804
this is a quick fix for the issue 'Course module with two or more availability restrictions is not accessible'
MDL-49434 is created to deal with the renderer access inside availability check
Eloy Lafuente (stronk7) [Sat, 7 Mar 2015 10:23:30 +0000 (11:23 +0100)]
Moodle release 2.6.9
David Monllao [Tue, 3 Mar 2015 04:38:46 +0000 (12:38 +0800)]
MDL-49204 core_message: Checking current user
Tim Hunt [Tue, 3 Mar 2015 13:11:35 +0000 (13:11 +0000)]
MDL-49364 quiz statistics: escape output in the response analysis
Eloy Lafuente (stronk7) [Tue, 3 Mar 2015 01:48:45 +0000 (02:48 +0100)]
MDL-49087 mdeploy: now relying on config.php documented
Andrew Nicols [Fri, 13 Feb 2015 06:06:31 +0000 (14:06 +0800)]
MDL-49087 mnet: Ensure typeroot is in dirroot
Andrew Nicols [Wed, 11 Feb 2015 02:03:15 +0000 (10:03 +0800)]
MDL-49087 mnet: Use real dataroot instead of user-provided
Marina Glancy [Tue, 13 Jan 2015 02:43:34 +0000 (10:43 +0800)]
MDL-48804 core: do not set current course until login validated
Juan Leyva [Thu, 29 Jan 2015 15:56:20 +0000 (16:56 +0100)]
MDL-48691 webservices: Check if the user must be changing password
Simey Lameze [Wed, 11 Feb 2015 06:14:43 +0000 (14:14 +0800)]
MDL-49084 core_tag: add capability check to flag as inappropriate action
Andrew Nicols [Tue, 10 Feb 2015 07:04:12 +0000 (15:04 +0800)]
MDL-49144 blocks: Sanitise alt and title for block controls
Andrew Nicols [Wed, 11 Feb 2015 00:58:37 +0000 (08:58 +0800)]
MDL-49144 blocks: Add behat test to ensury sanity of block title
Ankit Agarwal [Thu, 12 Feb 2015 08:58:58 +0000 (14:28 +0530)]
MDL-38466 filters: Redos protection and unit tests
Zachary Durber [Mon, 5 Jan 2015 03:01:34 +0000 (11:01 +0800)]
MDL-38466 filters: ReDoS protection for text to URL conversion.
Damyon Wiese [Fri, 13 Feb 2015 03:41:43 +0000 (11:41 +0800)]
MDL-49167 YUI: Fix for theme/yui_combo.php and $CFG->yuislashargs
It was too aggressively cleaning it's params (broken in MDL-48980).
AMOS bot [Tue, 10 Feb 2015 16:04:17 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 4 Feb 2015 16:04:15 +0000 (00:04 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Fri, 30 Jan 2015 11:35:01 +0000 (12:35 +0100)]
Moodle release 2.6.8
AMOS bot [Thu, 29 Jan 2015 16:04:20 +0000 (00:04 +0800)]
Automatically generated installer lang files
Damyon Wiese [Tue, 27 Jan 2015 15:16:10 +0000 (23:16 +0800)]
MDL-48980 Security: Always clean the result from min_get_slash_argument
The result from this function is used in send_file calls and if unclean
(windows dir separators, or .. path components) it could expose sensitive
files (e.g. .php files). Now we always clean the result from this function
even if it means double cleaning.
I also fixed the unit test for this function and added a new test for this cleaning.
I also updated the comments to point to get_file_argument as the full version of
min_get_slash_argument.
AMOS bot [Tue, 27 Jan 2015 16:04:29 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Sat, 17 Jan 2015 16:04:05 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 14 Jan 2015 16:04:09 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 12 Jan 2015 16:04:10 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Sat, 10 Jan 2015 16:04:13 +0000 (00:04 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Sat, 10 Jan 2015 12:12:36 +0000 (13:12 +0100)]
Moodle release 2.6.7
AMOS bot [Thu, 8 Jan 2015 16:04:20 +0000 (00:04 +0800)]
Automatically generated installer lang files
Zachary Durber [Wed, 7 Jan 2015 07:41:22 +0000 (15:41 +0800)]
MDL-48546 filters: Split on all tags for multimedia filter check.
AMOS bot [Wed, 7 Jan 2015 16:04:08 +0000 (00:04 +0800)]
Automatically generated installer lang files
Zachary Durber [Mon, 5 Jan 2015 02:43:40 +0000 (10:43 +0800)]
MDL-48546 filters: ReDoS protection for multimedia links.
Helen Foster [Tue, 6 Jan 2015 21:31:39 +0000 (22:31 +0100)]
MDL-48748 lang: Fix the regression from the last en_fix merge
See https://moodle.org/mod/forum/discuss.php?d=277584#p1192876
Simey Lameze [Tue, 11 Nov 2014 01:33:35 +0000 (09:33 +0800)]
MDL-47964 auth_shibboleth: Fix DOS on the shibboleth logout
Simey Lameze [Fri, 14 Nov 2014 08:11:11 +0000 (16:11 +0800)]
MDL-48017 core_calendar: add context validation to get_calendar_events
Andrew Nicols [Thu, 20 Nov 2014 01:27:24 +0000 (09:27 +0800)]
MDL-48106 mod_glossary: Add missing sesskey checks
David Monllao [Mon, 1 Dec 2014 02:29:05 +0000 (10:29 +0800)]
MDL-48329 core_message: Checking that messaging system is enabled
Simey Lameze [Mon, 8 Dec 2014 06:37:57 +0000 (14:37 +0800)]
MDL-48368 course: fix xss on course request pending page
Jetha Chan [Wed, 12 Nov 2014 07:03:32 +0000 (15:03 +0800)]
MDL-47920 mod_lti: add capability checks, http headers
AMOS bot [Sat, 27 Dec 2014 16:04:20 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 23 Dec 2014 16:04:20 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Sun, 21 Dec 2014 16:04:16 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 19 Dec 2014 16:04:18 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 12 Dec 2014 16:04:10 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 10 Dec 2014 16:04:11 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 5 Dec 2014 16:03:59 +0000 (00:03 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 3 Dec 2014 16:04:41 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 24 Nov 2014 16:04:17 +0000 (00:04 +0800)]
Automatically generated installer lang files
Dan Poltawski [Thu, 20 Nov 2014 18:05:24 +0000 (18:05 +0000)]
weekly release 2.6.6+
Dan Poltawski [Thu, 20 Nov 2014 18:05:24 +0000 (18:05 +0000)]
NOBUG: Fixed file access permissions
AMOS bot [Tue, 18 Nov 2014 16:05:47 +0000 (00:05 +0800)]
Automatically generated installer lang files
Pierre Pichet [Fri, 7 Nov 2014 14:54:43 +0000 (09:54 -0500)]
MDL-48042 Questions: Reset Calculated qtype comments on datasets
Reset back the modifications of Calculated qtype comments on datasets
done by MDL-47224
Signed-off-by: Pierre Pichet <pichet.pierre@uqam.ca>
John Okely [Thu, 13 Nov 2014 06:26:31 +0000 (14:26 +0800)]
MDL-47700 Grades: Fix incorrect config for overview report showrank
Tim Lock [Wed, 15 Oct 2014 22:04:53 +0000 (08:34 +1030)]
MDL-47700 Grades: Sitewide overview report isn't visible in some cases
Showing a overview report rank sitewide isn't visible to student in same cases
Eloy Lafuente (stronk7) [Sat, 8 Nov 2014 22:29:51 +0000 (23:29 +0100)]
Moodle release 2.6.6
AMOS bot [Sat, 8 Nov 2014 16:05:40 +0000 (00:05 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Fri, 7 Nov 2014 15:53:13 +0000 (16:53 +0100)]
weekly release 2.6.5+
John Okely [Fri, 31 Oct 2014 05:36:52 +0000 (13:36 +0800)]
MDL-47949 mod_wiki: Validate parameters for page deletion
Damyon Wiese [Fri, 7 Nov 2014 01:28:15 +0000 (09:28 +0800)]
MDL-48091 users: Revert "MDL-42875 users: Show only profile visible ...
This reverts commit
33ed15457c6ec3248e29d0db532d43f5d7c9dfd7.
David Mudrák [Thu, 6 Nov 2014 09:38:51 +0000 (10:38 +0100)]
MDL-48035 Fix Behat tests regressions after merging en_fix strings
John Okely [Thu, 6 Nov 2014 07:56:42 +0000 (15:56 +0800)]
MDL-47930 mod_forum: Detect subscription to subscription disabled forums
Return forums with disabled subscription that you are subscribed to in
forum_get_subscribed forums
Damyon Wiese [Thu, 6 Nov 2014 04:05:32 +0000 (12:05 +0800)]
MDL-43430 ldap: whitespace fix
Petr Skoda [Thu, 6 Nov 2014 01:37:48 +0000 (14:37 +1300)]
MDL-48083 dml: Empty buffers on forced rollback
Andrew Nicols [Mon, 3 Nov 2014 01:49:00 +0000 (09:49 +0800)]
MDL-48019 mod_forum: Add sesskey checks when setting tracking prefs
This also removes set_url() and changes require_course_login to
require_login as guests cannot set tracking.
Iñaki Arenaza [Sun, 26 Oct 2014 23:30:46 +0000 (00:30 +0100)]
MDL-43430 enrol_ldap: Enrolment lost if member of group with parenthesis
While testing the fix, it was found that ldap_stripslashes() was broken and
using a deprecated PCRE patter modifier, so it's also been fixed.
Thanks to Damyon Wiese, some units tests have been added to cover
ldap_addslashes() and ldap_stripslashes().
Damyon Wiese [Wed, 5 Nov 2014 06:27:58 +0000 (14:27 +0800)]
MDL-47793 assign: trivial fix for inconsistent use of get_instance()
Damyon Wiese [Wed, 5 Nov 2014 05:57:08 +0000 (13:57 +0800)]
MDL-27930 lesson: Remove custom styling from timer
Rajesh Taneja [Tue, 4 Nov 2014 09:23:25 +0000 (17:23 +0800)]
MDL-45416 enrol_ldap: Use null_progress_trace while running phpunit
