cms/djangoapps/contentstore · 792c3d93c1a938b913b7a7218f7f078cb795587e · edx / edx-platform

Escape json for Studio advanced settings · 44bd6529

- Resolve SEC-27 by escaping course name in advanced settings
- Add escape_json_dumps to simplify escaping json in Mako templates

SEC-27: XSS/JS Error in Advanced Settings with invalid course name

committed Nov 03, 2015

44bd6529

Name	Last commit	Last update
..
features		Loading commit data...
management		Loading commit data...
migrations		Loading commit data...
tests		Loading commit data...
views		Loading commit data...
__init__.py		Loading commit data...
admin.py		Loading commit data...
context_processors.py		Loading commit data...
course_group_config.py		Loading commit data...
course_info_model.py		Loading commit data...
courseware_index.py		Loading commit data...
debug_file_uploader.py		Loading commit data...
git_export_utils.py		Loading commit data...
models.py		Loading commit data...
proctoring.py		Loading commit data...
push_notification.py		Loading commit data...
signals.py		Loading commit data...
tasks.py		Loading commit data...
utils.py		Loading commit data...