L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
99,871 Commits 38 Branches 564 Tags
c0122356543232a6c19489b00b3794de80421f62
Commit Graph

7 Commits

Author SHA1 Message Date
David Mudrák 9ef6492e5d MDL-69050 lang: Fix variables and methods names in curl_security_helper 
The code has been using terms that were found exclusive and potentially
derogatory. Fixing the terms and making the variables and methods
consistent with the related admin settings.
 2020-09-24 19:32:39 +02:00
Cameron Ball 9aa776a848 MDL-61143 core_files: Don't append dot when checking domain names or IP addresses. 
Previously we appended a dot at the end of IP addresses and domain names in the
cURL security helper, but it causes issues with Google OAuth so this patch removes it.
 2018-01-10 15:22:17 +08:00
Cameron Ball fbe7f1f8ba MDL-61143 core_files: Block hosts that cannot be determined to be an IP address of domain name 
Freaky deaky Unicode/octal/hex domains can be resolved by cURL but are technically not valid.

This patch causes anything that Moodle does not consider to be a valid domain or IP to be blocked
by the cURL security helper.
 2018-01-09 16:54:32 +08:00
Cameron Ball cae2eb357d MDL-61143 core_files: Check all A records when testing blocked IPs 2018-01-09 16:54:32 +08:00
Jake Dallimore e858840437 MDL-58057 core_files: properly trim curl whitelist config when fetching 2017-03-07 09:49:22 +08:00
Jake Dallimore a448a38b1d MDL-57274 upgrade: fix curl security notices during upgrade/install 
Handles the case where $CFG->curlsecurityxxx vars don't yet exist
during install or upgrade by treating not set the same as empty.
 2017-02-20 08:55:57 +08:00
Jake Dallimore f6d9efefaa MDL-48498 core_files: curl_security_helper_base and implementation 
Base class and core implementation providing a means to check URLs
against the curl security admin settings entries.
 2016-11-08 15:11:15 +08:00