christianlight/tutor
6
0
Fork 0
mirror of https://github.com/ChristianLight/tutor.git synced 2025-01-05 23:20:40 +00:00
Code Issues Releases Activity

sec: fix LTI consumer xblock grading

Browse Source 
See advisory:
https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87
Discussion:
https://discuss.openedx.org/t/upcoming-security-release-xblock-lti-consumer/9165
Pull requests:
https://github.com/openedx/xblock-lti-consumer/pull/331
https://github.com/openedx/edx-platform/pull/31724
This commit is contained in:
Régis Behmo 2023-02-09 09:31:43 +01:00 committed by Régis Behmo
parent 561460ec7f
commit 9df3b18c31
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changelog.d/20230209_092607_regis_sec_lti.md Normal file
View File

@ -0,0 +1 @@
- [Security] Fix grading issue in LTI consumer XBlock. See [security advisory](https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87). (by @regisb)

3
tutor/templates/build/openedx/Dockerfile
View File

@ -53,6 +53,9 @@ RUN curl -fsSL https://github.com/openedx/edx-platform/commit/20b93b8b01276edadd
# Fix TinyMCE editor for html components
# https://github.com/openedx/edx-platform/pull/31500
RUN curl -fsSL https://github.com/openedx/edx-platform/commit/5af42f8ba3.patch | git am
# Fix security issue in lti-consumer-xblock
# https://github.com/openedx/edx-platform/pull/31724
RUN curl -fsSL https://github.com/openedx/edx-platform/commit/5f901a35d2.patch | git am
{%- endif %}
{# Example: RUN curl -fsSL https://github.com/openedx/edx-platform/commit/<GITSHA1> | git am #}