openedx/core/lib/tests · 74ef9dd047b9ee0e336c98363eda2a23c16e5eda · edx / edx-platform

Escape json for Studio advanced settings · 44bd6529

- Resolve SEC-27 by escaping course name in advanced settings
- Add escape_json_dumps to simplify escaping json in Mako templates

SEC-27: XSS/JS Error in Advanced Settings with invalid course name

committed Nov 03, 2015

44bd6529

Name	Last commit	Last update
..
assertions		Loading commit data...
__init__.py		Loading commit data...
test_cache_utils.py		Loading commit data...
test_course_tab_api.py		Loading commit data...
test_course_tabs.py		Loading commit data...
test_graph_traversals.py		Loading commit data...
test_json_utils.py		Loading commit data...