[Mahara-contributors] [Bug 1465107] A change has been merged
Reviewed: https://reviews.mahara.org/4921 Committed: https://git.nzoss.org.nz/mahara/mahara/commit/c3eed6c4e59255583c539d278fca3e6f45e98545 Submitter: Robert Lyon (robe...@catalyst.net.nz) Branch:master commit c3eed6c4e59255583c539d278fca3e6f45e98545 Author: Liam Sharpe liam.sha...@catalyst.net.nz Date: Mon Jul 6 12:01:35 2015 +1200 Fixed modal for export - Bootstrap (Bug #1465107) Change-Id: If90afa2f3735481c516a10187b91da113d5cac6f -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1465107 Title: Use the Bootstrap CSS framework Status in Mahara ePortfolio: In Progress Bug description: Mahara's CSS, and general front-end coding, is a bit chaotic. So for the past several months we've had a couple of front-end developers working on rewriting the entire Mahara front end to use the Bootstrap CSS framework. http://getbootstrap.com/css/ This should make all of our front-end development work easier henceforth, as well as providing a nice set of standard widgets to make Mahara look better right away. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1465107/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472382] Re: profile_sideblock display the institution name instead peer name
** Attachment added: institution-config.PNG https://bugs.launchpad.net/mahara/+bug/1472382/+attachment/4425935/+files/institution-config.PNG -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472382 Title: profile_sideblock display the institution name instead peer name Status in Mahara ePortfolio: New Bug description: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472382/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472382] Re: profile_sideblock display the institution name instead peer name
** Attachment added: xml-rpc.PNG https://bugs.launchpad.net/mahara/+bug/1472382/+attachment/4425936/+files/xml-rpc.PNG -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472382 Title: profile_sideblock display the institution name instead peer name Status in Mahara ePortfolio: New Bug description: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472382/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472382] [NEW] profile_sideblock display the institution name instead peer name
Public bug reported: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } ** Affects: mahara Importance: Undecided Status: New -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472382 Title: profile_sideblock display the institution name instead peer name Status in Mahara ePortfolio: New Bug description: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472382/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472382] Re: profile_sideblock display the institution name instead peer name
** Attachment added: institution.PNG https://bugs.launchpad.net/mahara/+bug/1472382/+attachment/4425934/+files/institution.PNG -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472382 Title: profile_sideblock display the institution name instead peer name Status in Mahara ePortfolio: New Bug description: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472382/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472382] Re: profile_sideblock display the institution name instead peer name
** Description changed: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. - I suggest to replace the institution by the peer name : + I suggest to replace the institution name by the peer name : - replace this : + replace this : if ($authinstance) { - $authobj = AuthFactory::create($authinstance); - if ($authobj-authname == 'xmlrpc') { - $peer = get_peer($authobj-wwwroot); - if ($SESSION-get('mnetuser')) { - $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); - } - else { - $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); - } - } - } + $authobj = AuthFactory::create($authinstance); + if ($authobj-authname == 'xmlrpc') { + $peer = get_peer($authobj-wwwroot); + if ($SESSION-get('mnetuser')) { + $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); + } + else { + $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); + } + } + } By : if ($authinstance) { - $authobj = AuthFactory::create($authinstance); - if ($authobj-authname == 'xmlrpc') { - $peer = get_peer($authobj-wwwroot); - if ($SESSION-get('mnetuser')) { - $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); - } - else { - $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); - } - } - } + $authobj = AuthFactory::create($authinstance); + if ($authobj-authname == 'xmlrpc') { + $peer = get_peer($authobj-wwwroot); + if ($SESSION-get('mnetuser')) { + $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); + } + else { + $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); + } + } + } -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472382 Title: profile_sideblock display the institution name instead peer name Status in Mahara ePortfolio: New Bug description: That is our situation: we have an institution called University of Montreal in which we have an XML-RPC authentication with the name of the authority is StudiUM (Moodle). The problem is: when we connect from StudiUM to Mahara, it is displayed You have logged in from University of Montreal. it is not logical because it should show You have logged in from Studium. In the instituion University of Montreal We have several entities, we want to specify which entity it is. I suggest to replace the institution name by the peer name : replace this : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, institution_display_name($peer-institution)); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } By : if ($authinstance) { $authobj = AuthFactory::create($authinstance); if ($authobj-authname == 'xmlrpc') { $peer = get_peer($authobj-wwwroot); if ($SESSION-get('mnetuser')) { $data['mnetloggedinfrom'] = get_string('youhaveloggedinfrom', 'auth.xmlrpc', $authobj-wwwroot, $peer-name); } else { $data['peer'] = array('name' = $peer-name, 'wwwroot' = $peer-wwwroot); } } } To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472382/+subscriptions ___
[Mahara-contributors] [Bug 1464858] A patch has been submitted for review
Patch for master branch: https://reviews.mahara.org/4926 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1464858 Title: Add MathJax and mhchem support to Mahara Status in Mahara ePortfolio: In Progress Bug description: MathJax has become the de facto standard for displaying mathematical equations on the Web. The mhchem extension to MathJax provides additional support for chemical equations. The addition of these would allow Mahara to better support STEM subjects. MathJax is already supported by recent versions of Moodle where it provides an alternative to server-side TeX filters. The following is a fairly minimalist implementation. More sophisticated admin/configuration could be added. 1. Add a checkbox to /htdocs/admin/site/options.php: Around line 113 add: 'mathjax' = array( 'type' = 'checkbox', 'title'= get_string('mathjax', 'admin'), 'description' = get_string('mathjaxdescription', 'admin'), 'defaultvalue' = get_config('mathjax'), 'help' = true, 'disabled' = in_array('mathjax', $OVERRIDDEN), ), Around line 763 add mathjax to the $fields array to give: $fields = array( 'sitename','lang','theme', 'dropdownmenu', 'defaultaccountlifetime', 'defaultregistrationexpirylifetime', 'defaultaccountinactiveexpire', 'defaultaccountinactivewarn', 'defaultaccountlifetimeupdate', 'allowpublicviews', 'allowpublicprofiles', 'allowanonymouspages', 'generatesitemap', 'registration_sendweeklyupdates', 'mathjax', 'institutionexpirynotification', 'institutionautosuspend', 'requireregistrationconfirm', 'showselfsearchsideblock', 'searchusernames', 'searchplugin', 'showtagssideblock', 'tagssideblockmaxtags', 'country', 'viewmicroheaders', 'userscanchooseviewthemes', 'remoteavatars', 'userscanhiderealnames', 'antispam', 'spamhaus', 'surbl', 'anonymouscomments', 'recaptchaonregisterform', 'recaptchapublickey', 'recaptchaprivatekey', 'loggedinprofileviewaccess', 'disableexternalresources', 'proxyaddress', 'proxyauthmodel', 'proxyauthcredentials', 'smtphosts', 'smtpport', 'smtpuser', 'smtppass', 'smtpsecure', 'noreplyaddress', 'homepageinfo', 'showprogressbar', 'showonlineuserssideblock', 'onlineuserssideblockmaxusers', 'registerterms', 'licensemetadata', 'licenseallowcustom', 'allowmobileuploads', 'creategroups', 'createpublicgroups', 'allowgroupcategories', 'wysiwyg', 'staffreports', 'staffstats', 'userscandisabledevicedetection', 'watchlistnotification_delay', 'masqueradingreasonrequired', 'masqueradingnotified', 'searchuserspublic', 'eventloglevel', 'eventlogexpiry', 'sitefilesaccess', 'exporttoqueue', ); 2 Add $CFG-mathjaxpath and $CFG-mathjaxconfig to the end of /lib/config-default.php: /** * @global string $cfg-mathjaxpath Determines the path to CDN or server-local installation of MathJax.js. * If MathJax is enabled, use to configure path to MathJax. */ $cfg-mathjaxpath = '//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMMLdelayStartupUntil=configured'; /** * @global string $cfg-mathjaxconfig Determines MathJax configuration options. * The default MathJax configuration should be appropriate for most users, but MathJax is highly configurable * and any of the standard MathJax configuration options can be added here. */ $cfg-mathjaxconfig = ' MathJax.Hub.Config({ TeX:{extensions: [mhchem.js]} }); MathJax.Hub.Configured(); '; NB the protocol-neutral MathJax URL should work with either http: or https: Mahara sites. 3. Add the following to htdocs/lib/web.php immediately before TinyMCE is first included around line 111: if (get_config('mathjax')) { $headers[] = 'script'.get_config('mathjaxconfig').'/script'; } and just after $javascript_array[] = $jsroot . 'keyboardNavigation.js'; around line 280 add: if (get_config('mathjax')) { $javascript_array[] = get_config('mathjaxpath'); } 4. To /lang/en.utf8/admin.php add: $string['mathjax'] = 'Enable MathJax'; $string['mathjaxdescription'] = 'MathJax enables mathematical and science equations to be displayed'; $string['mathjaxconfig'] = 'MathJax configuration'; 5 Create /lang/en.utf8/help/forms/siteoptions.mathjax.html with the content: !-- @license http://www.gnu.org/copyleft/gpl.html GNU GPL version 3 or later -- !-- @copyright For copyright information on Mahara, please see the README
[Mahara-contributors] [Bug 1472439] [NEW] XSS in add to watchlist link on artefact detail screen
*** This bug is a security vulnerability *** Private security bug reported: On artefact detail screens, when we you click on the add to watchlist link, we use AJAX to update the link to read remove from watchlist. But, we are not properly escaping the page title in that AJAX, which makes it possible to execute Javascript that has been placed in the page title. To replicate: 1. Create a portfolio Page 2. Give the page this title: img src=0 onerror=alert(location) 3. Put an image block in the page. 4. View the page in display mode. 5. Click on the link to view the artefact detail screen for the image 6. At the bottom of the artefact detail screen, click on the link that reads Add page img src=0 onerror=alert(location) to watchlist or Remove page img src=0 onerror=alert(location) to watchlist Expected result: The page should be added or removed from your watchlist, and the link title should show the HTML-escaped version of the page title. Actual result: The page is added or removed from your watchlist, but the link title is not HTML-escaped and Javascript alert(location) executes. ** Affects: mahara Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: In Progress ** Affects: mahara/1.10 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Affects: mahara/1.8 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Won't Fix ** Affects: mahara/1.9 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Affects: mahara/15.04 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: Confirmed ** Affects: mahara/15.10 Importance: Critical Assignee: Aaron Wells (u-aaronw) Status: In Progress ** Tags: regression watchlist ** Information type changed from Public to Private Security ** Changed in: mahara Status: New = In Progress ** Also affects: mahara/15.04 Importance: Undecided Status: New ** Also affects: mahara/15.10 Importance: Undecided Status: In Progress ** Also affects: mahara/1.8 Importance: Undecided Status: New ** Also affects: mahara/1.9 Importance: Undecided Status: New ** Also affects: mahara/1.10 Importance: Undecided Status: New ** Changed in: mahara/1.8 Status: New = Won't Fix ** Changed in: mahara/1.10 Status: New = Confirmed ** Changed in: mahara/1.9 Status: New = Confirmed ** Changed in: mahara/15.04 Status: New = Confirmed ** Changed in: mahara/1.10 Importance: Undecided = Critical ** Changed in: mahara/1.8 Importance: Undecided = Critical ** Changed in: mahara/1.9 Importance: Undecided = Critical ** Changed in: mahara/15.04 Importance: Undecided = Critical ** Changed in: mahara/15.10 Importance: Undecided = Critical ** Changed in: mahara/1.10 Assignee: (unassigned) = Aaron Wells (u-aaronw) ** Changed in: mahara/1.8 Assignee: (unassigned) = Aaron Wells (u-aaronw) ** Changed in: mahara/1.9 Assignee: (unassigned) = Aaron Wells (u-aaronw) ** Changed in: mahara/15.04 Assignee: (unassigned) = Aaron Wells (u-aaronw) ** Changed in: mahara/15.10 Assignee: (unassigned) = Aaron Wells (u-aaronw) ** Changed in: mahara/15.10 Milestone: None = 15.10.0 ** Changed in: mahara/15.04 Milestone: None = 15.04.2 ** Changed in: mahara/1.9 Milestone: None = 1.9.7 ** Changed in: mahara/1.10 Milestone: None = 1.10.5 ** Tags added: regression watchlist -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472439 Title: XSS in add to watchlist link on artefact detail screen Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 1.8 series: Won't Fix Status in Mahara 1.9 series: Confirmed Status in Mahara 15.04 series: Confirmed Status in Mahara 15.10 series: In Progress Bug description: On artefact detail screens, when we you click on the add to watchlist link, we use AJAX to update the link to read remove from watchlist. But, we are not properly escaping the page title in that AJAX, which makes it possible to execute Javascript that has been placed in the page title. To replicate: 1. Create a portfolio Page 2. Give the page this title: img src=0 onerror=alert(location) 3. Put an image block in the page. 4. View the page in display mode. 5. Click on the link to view the artefact detail screen for the image 6. At the bottom of the artefact detail screen, click on the link that reads Add page img src=0 onerror=alert(location) to watchlist or Remove page img src=0 onerror=alert(location) to watchlist Expected result: The page should
[Mahara-contributors] [Bug 1472443] A patch has been submitted for review
Patch for master branch: https://reviews.mahara.org/4928 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472443 Title: Can't use method return value in write context error in forgotpass.php Status in Mahara ePortfolio: In Progress Status in Mahara 15.04 series: Confirmed Bug description: Need to remove the empty() check as the options for the variable 'pwchangerequested' is true/false To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472443/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1460850] A patch has been submitted for review
Patch for 15.04_STABLE branch: https://reviews.mahara.org/4932 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1460850 Title: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable' Status in Mahara ePortfolio: Fix Committed Status in Mahara 15.04 series: In Progress Bug description: Logged out users should not be allowed to use the wysiwyg editor when leaving feedback - this is due to them not allowed to upload images etc. When the 'Administration' - 'Configure site' - 'General settings' field for 'HTML editor' is set to 'enable' the wysiwyg is shown when logged out. This is due to the is_html_editor_enabled() function not being robust enough. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1460850/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1464858] A change has been merged
Reviewed: https://reviews.mahara.org/4913 Committed: https://git.nzoss.org.nz/mahara/mahara/commit/5a7b0f81c574e5d02b56015f8453f753eb503dc4 Submitter: Aaron Wells (aar...@catalyst.net.nz) Branch:master commit 5a7b0f81c574e5d02b56015f8453f753eb503dc4 Author: Geoff Rowland rowland.ge...@gmail.com Date: Wed Jun 17 14:27:51 2015 +0100 Add MathJax and mhchem support to Mahara (bug #1464858) This provides support for rendering LaTeX into math chemistry equations. Change-Id: I34a30296f46ba7eeb635e6924172ddc6e65175c3 Signed-off-by: Aaron Wells aar...@catalyst.net.nz -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1464858 Title: Add MathJax and mhchem support to Mahara Status in Mahara ePortfolio: Fix Committed Bug description: MathJax has become the de facto standard for displaying mathematical equations on the Web. The mhchem extension to MathJax provides additional support for chemical equations. The addition of these would allow Mahara to better support STEM subjects. MathJax is already supported by recent versions of Moodle where it provides an alternative to server-side TeX filters. The following is a fairly minimalist implementation. More sophisticated admin/configuration could be added. 1. Add a checkbox to /htdocs/admin/site/options.php: Around line 113 add: 'mathjax' = array( 'type' = 'checkbox', 'title'= get_string('mathjax', 'admin'), 'description' = get_string('mathjaxdescription', 'admin'), 'defaultvalue' = get_config('mathjax'), 'help' = true, 'disabled' = in_array('mathjax', $OVERRIDDEN), ), Around line 763 add mathjax to the $fields array to give: $fields = array( 'sitename','lang','theme', 'dropdownmenu', 'defaultaccountlifetime', 'defaultregistrationexpirylifetime', 'defaultaccountinactiveexpire', 'defaultaccountinactivewarn', 'defaultaccountlifetimeupdate', 'allowpublicviews', 'allowpublicprofiles', 'allowanonymouspages', 'generatesitemap', 'registration_sendweeklyupdates', 'mathjax', 'institutionexpirynotification', 'institutionautosuspend', 'requireregistrationconfirm', 'showselfsearchsideblock', 'searchusernames', 'searchplugin', 'showtagssideblock', 'tagssideblockmaxtags', 'country', 'viewmicroheaders', 'userscanchooseviewthemes', 'remoteavatars', 'userscanhiderealnames', 'antispam', 'spamhaus', 'surbl', 'anonymouscomments', 'recaptchaonregisterform', 'recaptchapublickey', 'recaptchaprivatekey', 'loggedinprofileviewaccess', 'disableexternalresources', 'proxyaddress', 'proxyauthmodel', 'proxyauthcredentials', 'smtphosts', 'smtpport', 'smtpuser', 'smtppass', 'smtpsecure', 'noreplyaddress', 'homepageinfo', 'showprogressbar', 'showonlineuserssideblock', 'onlineuserssideblockmaxusers', 'registerterms', 'licensemetadata', 'licenseallowcustom', 'allowmobileuploads', 'creategroups', 'createpublicgroups', 'allowgroupcategories', 'wysiwyg', 'staffreports', 'staffstats', 'userscandisabledevicedetection', 'watchlistnotification_delay', 'masqueradingreasonrequired', 'masqueradingnotified', 'searchuserspublic', 'eventloglevel', 'eventlogexpiry', 'sitefilesaccess', 'exporttoqueue', ); 2 Add $CFG-mathjaxpath and $CFG-mathjaxconfig to the end of /lib/config-default.php: /** * @global string $cfg-mathjaxpath Determines the path to CDN or server-local installation of MathJax.js. * If MathJax is enabled, use to configure path to MathJax. */ $cfg-mathjaxpath = '//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMMLdelayStartupUntil=configured'; /** * @global string $cfg-mathjaxconfig Determines MathJax configuration options. * The default MathJax configuration should be appropriate for most users, but MathJax is highly configurable * and any of the standard MathJax configuration options can be added here. */ $cfg-mathjaxconfig = ' MathJax.Hub.Config({ TeX:{extensions: [mhchem.js]} }); MathJax.Hub.Configured(); '; NB the protocol-neutral MathJax URL should work with either http: or https: Mahara sites. 3. Add the following to htdocs/lib/web.php immediately before TinyMCE is first included around line 111: if (get_config('mathjax')) { $headers[] = 'script'.get_config('mathjaxconfig').'/script'; } and just after $javascript_array[] = $jsroot . 'keyboardNavigation.js'; around line 280 add: if (get_config('mathjax')) {
[Mahara-contributors] [Bug 1464858] Re: Add MathJax and mhchem support to Mahara
Patch 4926 is for adding the MathSlate TinyMCE plugin. I've spun that off into a separate Launchpad issue: Bug 1472446. ** Changed in: mahara Status: In Progress = Fix Committed ** Tags added: nominatedfeature -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1464858 Title: Add MathJax and mhchem support to Mahara Status in Mahara ePortfolio: Fix Committed Bug description: MathJax has become the de facto standard for displaying mathematical equations on the Web. The mhchem extension to MathJax provides additional support for chemical equations. The addition of these would allow Mahara to better support STEM subjects. MathJax is already supported by recent versions of Moodle where it provides an alternative to server-side TeX filters. The following is a fairly minimalist implementation. More sophisticated admin/configuration could be added. 1. Add a checkbox to /htdocs/admin/site/options.php: Around line 113 add: 'mathjax' = array( 'type' = 'checkbox', 'title'= get_string('mathjax', 'admin'), 'description' = get_string('mathjaxdescription', 'admin'), 'defaultvalue' = get_config('mathjax'), 'help' = true, 'disabled' = in_array('mathjax', $OVERRIDDEN), ), Around line 763 add mathjax to the $fields array to give: $fields = array( 'sitename','lang','theme', 'dropdownmenu', 'defaultaccountlifetime', 'defaultregistrationexpirylifetime', 'defaultaccountinactiveexpire', 'defaultaccountinactivewarn', 'defaultaccountlifetimeupdate', 'allowpublicviews', 'allowpublicprofiles', 'allowanonymouspages', 'generatesitemap', 'registration_sendweeklyupdates', 'mathjax', 'institutionexpirynotification', 'institutionautosuspend', 'requireregistrationconfirm', 'showselfsearchsideblock', 'searchusernames', 'searchplugin', 'showtagssideblock', 'tagssideblockmaxtags', 'country', 'viewmicroheaders', 'userscanchooseviewthemes', 'remoteavatars', 'userscanhiderealnames', 'antispam', 'spamhaus', 'surbl', 'anonymouscomments', 'recaptchaonregisterform', 'recaptchapublickey', 'recaptchaprivatekey', 'loggedinprofileviewaccess', 'disableexternalresources', 'proxyaddress', 'proxyauthmodel', 'proxyauthcredentials', 'smtphosts', 'smtpport', 'smtpuser', 'smtppass', 'smtpsecure', 'noreplyaddress', 'homepageinfo', 'showprogressbar', 'showonlineuserssideblock', 'onlineuserssideblockmaxusers', 'registerterms', 'licensemetadata', 'licenseallowcustom', 'allowmobileuploads', 'creategroups', 'createpublicgroups', 'allowgroupcategories', 'wysiwyg', 'staffreports', 'staffstats', 'userscandisabledevicedetection', 'watchlistnotification_delay', 'masqueradingreasonrequired', 'masqueradingnotified', 'searchuserspublic', 'eventloglevel', 'eventlogexpiry', 'sitefilesaccess', 'exporttoqueue', ); 2 Add $CFG-mathjaxpath and $CFG-mathjaxconfig to the end of /lib/config-default.php: /** * @global string $cfg-mathjaxpath Determines the path to CDN or server-local installation of MathJax.js. * If MathJax is enabled, use to configure path to MathJax. */ $cfg-mathjaxpath = '//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMMLdelayStartupUntil=configured'; /** * @global string $cfg-mathjaxconfig Determines MathJax configuration options. * The default MathJax configuration should be appropriate for most users, but MathJax is highly configurable * and any of the standard MathJax configuration options can be added here. */ $cfg-mathjaxconfig = ' MathJax.Hub.Config({ TeX:{extensions: [mhchem.js]} }); MathJax.Hub.Configured(); '; NB the protocol-neutral MathJax URL should work with either http: or https: Mahara sites. 3. Add the following to htdocs/lib/web.php immediately before TinyMCE is first included around line 111: if (get_config('mathjax')) { $headers[] = 'script'.get_config('mathjaxconfig').'/script'; } and just after $javascript_array[] = $jsroot . 'keyboardNavigation.js'; around line 280 add: if (get_config('mathjax')) { $javascript_array[] = get_config('mathjaxpath'); } 4. To /lang/en.utf8/admin.php add: $string['mathjax'] = 'Enable MathJax'; $string['mathjaxdescription'] = 'MathJax enables mathematical and science equations to be displayed'; $string['mathjaxconfig'] = 'MathJax configuration'; 5 Create /lang/en.utf8/help/forms/siteoptions.mathjax.html with the
[Mahara-contributors] [Bug 1472443] [NEW] Can't use method return value in write context error in forgotpass.php
Public bug reported: Need to remove the empty() check as the options for the variable 'pwchangerequested' is true/false ** Affects: mahara Importance: Medium Status: In Progress ** Affects: mahara/15.04 Importance: Medium Status: Confirmed ** Changed in: mahara Milestone: None = 15.10.0 ** Changed in: mahara Importance: Undecided = Medium ** Changed in: mahara Status: New = In Progress ** Also affects: mahara/15.04 Importance: Undecided Status: New ** Changed in: mahara/15.04 Milestone: None = 15.04.2 ** Changed in: mahara/15.04 Status: New = Confirmed ** Changed in: mahara/15.04 Importance: Undecided = Medium -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472443 Title: Can't use method return value in write context error in forgotpass.php Status in Mahara ePortfolio: In Progress Status in Mahara 15.04 series: Confirmed Bug description: Need to remove the empty() check as the options for the variable 'pwchangerequested' is true/false To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472443/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1460850] Re: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable'
** Changed in: mahara Status: In Progress = Fix Committed ** Changed in: mahara/15.04 Status: New = In Progress -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1460850 Title: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable' Status in Mahara ePortfolio: Fix Committed Status in Mahara 15.04 series: In Progress Bug description: Logged out users should not be allowed to use the wysiwyg editor when leaving feedback - this is due to them not allowed to upload images etc. When the 'Administration' - 'Configure site' - 'General settings' field for 'HTML editor' is set to 'enable' the wysiwyg is shown when logged out. This is due to the is_html_editor_enabled() function not being robust enough. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1460850/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1464858] Re: Add MathJax and mhchem support to Mahara
Okay, Mahara 15.10 now supports MathJax! Thanks for the patch, Geoffrey. -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1464858 Title: Add MathJax and mhchem support to Mahara Status in Mahara ePortfolio: Fix Committed Bug description: MathJax has become the de facto standard for displaying mathematical equations on the Web. The mhchem extension to MathJax provides additional support for chemical equations. The addition of these would allow Mahara to better support STEM subjects. MathJax is already supported by recent versions of Moodle where it provides an alternative to server-side TeX filters. The following is a fairly minimalist implementation. More sophisticated admin/configuration could be added. 1. Add a checkbox to /htdocs/admin/site/options.php: Around line 113 add: 'mathjax' = array( 'type' = 'checkbox', 'title'= get_string('mathjax', 'admin'), 'description' = get_string('mathjaxdescription', 'admin'), 'defaultvalue' = get_config('mathjax'), 'help' = true, 'disabled' = in_array('mathjax', $OVERRIDDEN), ), Around line 763 add mathjax to the $fields array to give: $fields = array( 'sitename','lang','theme', 'dropdownmenu', 'defaultaccountlifetime', 'defaultregistrationexpirylifetime', 'defaultaccountinactiveexpire', 'defaultaccountinactivewarn', 'defaultaccountlifetimeupdate', 'allowpublicviews', 'allowpublicprofiles', 'allowanonymouspages', 'generatesitemap', 'registration_sendweeklyupdates', 'mathjax', 'institutionexpirynotification', 'institutionautosuspend', 'requireregistrationconfirm', 'showselfsearchsideblock', 'searchusernames', 'searchplugin', 'showtagssideblock', 'tagssideblockmaxtags', 'country', 'viewmicroheaders', 'userscanchooseviewthemes', 'remoteavatars', 'userscanhiderealnames', 'antispam', 'spamhaus', 'surbl', 'anonymouscomments', 'recaptchaonregisterform', 'recaptchapublickey', 'recaptchaprivatekey', 'loggedinprofileviewaccess', 'disableexternalresources', 'proxyaddress', 'proxyauthmodel', 'proxyauthcredentials', 'smtphosts', 'smtpport', 'smtpuser', 'smtppass', 'smtpsecure', 'noreplyaddress', 'homepageinfo', 'showprogressbar', 'showonlineuserssideblock', 'onlineuserssideblockmaxusers', 'registerterms', 'licensemetadata', 'licenseallowcustom', 'allowmobileuploads', 'creategroups', 'createpublicgroups', 'allowgroupcategories', 'wysiwyg', 'staffreports', 'staffstats', 'userscandisabledevicedetection', 'watchlistnotification_delay', 'masqueradingreasonrequired', 'masqueradingnotified', 'searchuserspublic', 'eventloglevel', 'eventlogexpiry', 'sitefilesaccess', 'exporttoqueue', ); 2 Add $CFG-mathjaxpath and $CFG-mathjaxconfig to the end of /lib/config-default.php: /** * @global string $cfg-mathjaxpath Determines the path to CDN or server-local installation of MathJax.js. * If MathJax is enabled, use to configure path to MathJax. */ $cfg-mathjaxpath = '//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMMLdelayStartupUntil=configured'; /** * @global string $cfg-mathjaxconfig Determines MathJax configuration options. * The default MathJax configuration should be appropriate for most users, but MathJax is highly configurable * and any of the standard MathJax configuration options can be added here. */ $cfg-mathjaxconfig = ' MathJax.Hub.Config({ TeX:{extensions: [mhchem.js]} }); MathJax.Hub.Configured(); '; NB the protocol-neutral MathJax URL should work with either http: or https: Mahara sites. 3. Add the following to htdocs/lib/web.php immediately before TinyMCE is first included around line 111: if (get_config('mathjax')) { $headers[] = 'script'.get_config('mathjaxconfig').'/script'; } and just after $javascript_array[] = $jsroot . 'keyboardNavigation.js'; around line 280 add: if (get_config('mathjax')) { $javascript_array[] = get_config('mathjaxpath'); } 4. To /lang/en.utf8/admin.php add: $string['mathjax'] = 'Enable MathJax'; $string['mathjaxdescription'] = 'MathJax enables mathematical and science equations to be displayed'; $string['mathjaxconfig'] = 'MathJax configuration'; 5 Create /lang/en.utf8/help/forms/siteoptions.mathjax.html with the content: !-- @license http://www.gnu.org/copyleft/gpl.html GNU GPL version 3 or later -- !-- @copyright For copyright information on Mahara,
[Mahara-contributors] [Bug 1472446] Re: Add MathSlate TinyMCE plugin
Robert already submitted a patch for this under Bug 1464858, but since it's a separate plugin I'm spinning it off into a new bug. -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472446 Title: Add MathSlate TinyMCE plugin Status in Mahara ePortfolio: In Progress Bug description: As suggested in Bug 1464858, adding the MathSlate TinyMCE plugin to Mahara, to make it easier to write mathematical and chemical notation. This plugin can use the same mathjax enabled config option, although it might make sense to rename the language strings to reflect that it's enable mathjax and mathslate. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472446/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472446] Re: Add MathSlate TinyMCE plugin
Patch for master: https://reviews.mahara.org/#/c/4926/ ** Tags added: mathjax -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472446 Title: Add MathSlate TinyMCE plugin Status in Mahara ePortfolio: In Progress Bug description: As suggested in Bug 1464858, adding the MathSlate TinyMCE plugin to Mahara, to make it easier to write mathematical and chemical notation. This plugin can use the same mathjax enabled config option, although it might make sense to rename the language strings to reflect that it's enable mathjax and mathslate. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472446/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472446] [NEW] Add MathSlate TinyMCE plugin
Public bug reported: As suggested in Bug 1464858, adding the MathSlate TinyMCE plugin to Mahara, to make it easier to write mathematical and chemical notation. This plugin can use the same mathjax enabled config option, although it might make sense to rename the language strings to reflect that it's enable mathjax and mathslate. ** Affects: mahara Importance: Wishlist Assignee: Robert Lyon (robertl-9) Status: In Progress ** Tags: mathjax mathslate tinymce -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472446 Title: Add MathSlate TinyMCE plugin Status in Mahara ePortfolio: In Progress Bug description: As suggested in Bug 1464858, adding the MathSlate TinyMCE plugin to Mahara, to make it easier to write mathematical and chemical notation. This plugin can use the same mathjax enabled config option, although it might make sense to rename the language strings to reflect that it's enable mathjax and mathslate. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472446/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472467] [NEW] Add journal / blog to institution
Public bug reported: Allow an institution to have an institutional journal. This way when new users are created they get a copy of the journal pre- populated with entries ** Affects: mahara Importance: Wishlist Assignee: Robert Lyon (robertl-9) Status: In Progress -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472467 Title: Add journal / blog to institution Status in Mahara ePortfolio: In Progress Bug description: Allow an institution to have an institutional journal. This way when new users are created they get a copy of the journal pre-populated with entries To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472467/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1460850] A change has been merged
Reviewed: https://reviews.mahara.org/4932 Committed: https://git.nzoss.org.nz/mahara/mahara/commit/f7fc0f90cb4738d02485d819fc29239d780c035e Submitter: Robert Lyon (robe...@catalyst.net.nz) Branch:15.04_STABLE commit f7fc0f90cb4738d02485d819fc29239d780c035e Author: Robert Lyon robe...@catalyst.net.nz Date: Tue Jun 2 11:40:26 2015 +1200 Making sure user is logged in before they can see the tinymce Bug 1460850 As we shouldn't be able to see/use it if we are anonymous user Change-Id: I1e454bcbd17667c88650360cee82069801e7c36b Signed-off-by: Robert Lyon robe...@catalyst.net.nz (cherry picked from commit 962c9c48ad5d2c1e7413807c3bbc75de1a9c4c5b) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1460850 Title: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable' Status in Mahara ePortfolio: Fix Committed Status in Mahara 15.04 series: Fix Committed Bug description: Logged out users should not be allowed to use the wysiwyg editor when leaving feedback - this is due to them not allowed to upload images etc. When the 'Administration' - 'Configure site' - 'General settings' field for 'HTML editor' is set to 'enable' the wysiwyg is shown when logged out. This is due to the is_html_editor_enabled() function not being robust enough. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1460850/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1460850] Re: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable'
** Changed in: mahara/15.04 Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1460850 Title: wysiwyg tinymce showing on logged out pages if config 'wysiwyg' is set to 'enable' Status in Mahara ePortfolio: Fix Committed Status in Mahara 15.04 series: Fix Committed Bug description: Logged out users should not be allowed to use the wysiwyg editor when leaving feedback - this is due to them not allowed to upload images etc. When the 'Administration' - 'Configure site' - 'General settings' field for 'HTML editor' is set to 'enable' the wysiwyg is shown when logged out. This is due to the is_html_editor_enabled() function not being robust enough. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1460850/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
[Mahara-contributors] [Bug 1472467] A patch has been submitted for review
Patch for master branch: https://reviews.mahara.org/4938 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1472467 Title: Add journal / blog to institution Status in Mahara ePortfolio: In Progress Bug description: Allow an institution to have an institutional journal. This way when new users are created they get a copy of the journal pre-populated with entries To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1472467/+subscriptions ___ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp