Skip to content

Incident Management security fixes - #25789

Closed
Ali-D-Akbar wants to merge 14 commits into
masterfrom
IM/backport-koa-security-fixes
Closed

Incident Management security fixes#25789
Ali-D-Akbar wants to merge 14 commits into
masterfrom
IM/backport-koa-security-fixes

Conversation

@Ali-D-Akbar

Copy link
Copy Markdown
Contributor

Corresponds to #25786 and contains xss fixes for the following prod tickets:

  1. PROD-2126
  2. PROD-2227
  3. PROD-2229
  4. PROD-2230
  5. PROD-2231
  6. PROD-2232
  7. PROD-2233
  8. PROD-2236
  9. PROD-2244
  10. PROD-2246
  11. PROD-2249
  12. PROD-2250

Ned Batchelder and others added 14 commits November 12, 2020 16:37
warnings.py:109 - /edx/app/edxapp/edx-platform/common/djangoapps/static_replace/__init__.py:76: DeprecationWarning: Flags not at the start of the expression '\n        (?x)       ' (truncated)

(cherry picked from commit 9a72148)
…rsa (#25678)

Should resolve "re.error: nothing to repeat at position 0"
when running pylint locally.

Changes:
* Fix import_shims pylint violations
* Include import_shims directory in linting
* Stop shimming imports when running pylint
* Regenerate import_shims (for koa.master)
DeprecationWarning: The unescape method is deprecated and will be
removed in 3.5, use html.unescape() instead.

(cherry picked from commit ae81d33)
(cherry picked from commit 8961db4)
…quashes

[WIP] [BTR-39] Cherry-pick warning squash commits
…not_found_on_cache_invalidation_port

[BTR-46] [SE-3439] Fixes block structure not caching when cache invalidation is enabled
These were first added in
edx@d95b46dd19 but they don't
seem to do anything.  On Open edX sites, they are misleading.

(cherry picked from commit cd0ef5b)
@Ali-D-Akbar Ali-D-Akbar changed the title IM security fixes Incident Management security fixes Dec 7, 2020
@Ali-D-Akbar Ali-D-Akbar closed this Dec 7, 2020
@edx-status-bot

Copy link
Copy Markdown

Your PR has finished running tests. The following contexts failed:

  • jenkins/quality

@nedbat
nedbat deleted the IM/backport-koa-security-fixes branch December 8, 2020 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants