ylqjgm
/
canvas-lms
mirror of https://github.com/instructure/canvas-lms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
34,409 Commits 324 Branches 20,019 Tags 1.7 GiB
Ruby 51.2%
JavaScript 33.7%
TypeScript 10.3%
HTML 2.5%
SCSS 1.3%
Other 1%
Go to file
Jeremy Stanley cc9bba8ca8 sanitize quiz answer comments on the way in 
I am not aware of any XSS vulnerabilities, because these were
sanitized on the way out, but defense in depth seems like a
good idea here

closes ADMIN-2494

Change-Id: I5d782b23e494a3877302d19aa4cd1c1b29a22b02
Reviewed-on: https://gerrit.instructure.com/180631
Tested-by: Jenkins
Reviewed-by: Jon Willesen <jonw+gerrit@instructure.com>
QA-Review: Anju Reddy <areddy@instructure.com>
QA-Review: Mysti Lilla <mysti@instructure.com>
Product-Review: Jeremy Stanley <jeremy@instructure.com>
 		2019-03-21 16:30:09 +00:00
.github Auto-assign github pull requests 2019-01-25 20:56:46 +00:00
Gemfile.d upgrade to graphql-ruby 1.9.3 2019-03-14 17:26:58 +00:00
app sanitize quiz answer comments on the way in 2019-03-21 16:30:09 +00:00
bin spec: add scripts to publish to public pact broker 2018-10-19 02:23:04 +00:00
build Have the RCE sidebar useable on Jenkins 2018-11-21 17:15:20 +00:00
client_apps update quiz statistics documentation 2019-01-07 22:31:07 +00:00
config fix CSP enforcement, and show alerts for top level violations 2019-03-20 19:02:49 +00:00
db/migrate Add AttachmentUploadStatus to track upload errors. 2019-03-19 18:31:28 +00:00
doc Update API Change log for 2019-03-30 2019-03-13 21:56:57 +00:00
docker-compose update docker selenium images 2018-11-02 20:11:41 +00:00
frontend_build add slovenian locale 2019-03-12 14:33:42 +00:00
gems stop logging stats in adheres_to_policy 2019-03-21 16:29:16 +00:00
hooks fix pre-commit hook with unfixable eslint error 2018-11-27 23:28:12 +00:00
jest A2: create message students who modal basics 2019-02-28 16:12:39 +00:00
lib Update wording for LTI Advantage messaging 2019-03-20 22:14:40 +00:00
packages Upgrade canvas-planner & rce to not use ui-presets 2019-03-18 20:48:42 +00:00
pact Include context_name in planner item response 2018-08-29 22:20:52 +00:00
public stop making rubrics page jump in edge 42+ 2019-03-20 22:21:54 +00:00
script add json version of javascript coverage report to build 2019-02-26 16:34:58 +00:00
spec sanitize quiz answer comments on the way in 2019-03-21 16:30:09 +00:00
.babelrc dynamic import comments 2019-02-06 20:36:20 +00:00
.bowerrc introduced bower to manage js dependencies 2013-12-13 17:45:57 +00:00
.codeclimate.yml disable ESLint in code climate 2017-02-14 17:47:39 +00:00
.dockerignore fix canvas-planner docker build process 2018-04-17 14:44:18 +00:00
.editorconfig Add EditorConfig configuration file to help maintain code style 2016-11-15 20:08:55 +00:00
.eslintignore ESLint standardization 2018-11-06 17:46:21 +00:00
.eslintrc.js Add precommit hook for auto fixing files 2018-11-27 21:07:31 +00:00
.gitignore Upgrade canvas-planner & rce to not use ui-presets 2019-03-18 20:48:42 +00:00
.i18nignore bump rails 3 to github branch for ruby 2.2 compatibility 2015-02-18 22:55:20 +00:00
.i18nrc upgrade to node 6 2016-08-09 23:37:07 +00:00
.lintstagedrc.js Add precommit hook for auto fixing files 2018-11-27 21:07:31 +00:00
.npmrc fix brand config previewing and skipping 2015-10-27 16:16:15 +00:00
.nvmrc Use node 8.10.0 instead of 8.9.4 2018-03-09 18:56:22 +00:00
.prettierrc Add .prettierrc so it matches our existing code 2017-11-03 16:21:50 +00:00
.prettierwhitelist.js add shared components to eslint + prettier formatting 2019-03-05 20:12:40 +00:00
.rubocop.yml spec: remove ExpectChange and TimesMap 2018-08-31 14:53:41 +00:00
.selinimumignore Revert and bring InstIcons into Canvas 2016-11-29 20:52:54 +00:00
.stylelintrc Lint for css that will break RTL 2018-10-17 20:21:25 +00:00
.travis.yml more travis builds 2014-02-10 16:23:19 +00:00
CONTRIBUTING.md Add CLA FAQ from legal 2018-01-22 16:41:44 -05:00
COPYRIGHT Initial commit. 2011-01-31 18:57:29 -07:00
Dockerfile bump yarn in docker 2018-11-15 21:41:02 +00:00
Dockerfile-production bump yarn in docker 2018-11-15 21:41:02 +00:00
Dockerfile.githook Add precommit hook for auto fixing files 2018-11-27 21:07:31 +00:00
Gemfile allow choosing rails 5.1 via consul 2017-10-11 19:13:02 +00:00
Jenkinsfile Tag patchset and merged events 2019-03-14 20:49:21 +00:00
LICENSE Initial commit. 2011-01-31 18:57:29 -07:00
README.md Update README.md since Canvas is still modern 2016-12-15 03:18:28 +00:00
Rakefile remove dead parallelized specs task 2016-11-10 21:41:08 +00:00
bower.json spec: remove ember-qunit 2018-07-13 14:24:41 +00:00
code_of_conduct.md contributor code of conduct 2014-12-23 18:13:59 +00:00
config.ru remove extra logging to debug Passenger connection orphan issue 2017-07-14 16:27:03 +00:00
docker-compose.jenkins.yml Have the RCE sidebar useable on Jenkins 2018-11-21 17:15:20 +00:00
docker-compose.override.yml Add precommit hook for auto fixing files 2018-11-27 21:07:31 +00:00
docker-compose.yml Use redis:alpine 2017-07-31 22:31:40 +00:00
gulpfile.js upgrade instUI to 5.41.1 2019-02-09 15:52:58 +00:00
issue_template.md Make issue template disclaimer a comment 2018-05-01 15:00:27 +00:00
jest.config.js support testing coffeescript with jest 2019-02-25 17:57:15 +00:00
karma.conf.js Opt our js build tooling dirs into prettier 2018-11-07 22:46:16 +00:00
package.json Upgrade canvas-planner & rce to not use ui-presets 2019-03-18 20:48:42 +00:00
schema.graphql Save submission_comments to specific submission attempt 2019-03-18 21:55:59 +00:00
webpack.config.js Opt our js build tooling dirs into prettier 2018-11-07 22:46:16 +00:00
webpack.production.config.js Fix webpack/react/uglify-es performance regression 2018-11-08 21:06:26 +00:00
webpack.test.config.js Opt our js build tooling dirs into prettier 2018-11-07 22:46:16 +00:00
yarn.lock update inst-ui 2019-03-20 18:13:10 +00:00

README.md

Canvas LMS

Canvas is a modern, open-source LMS developed and maintained by Instructure Inc. It is released under the AGPLv3 license for use by anyone interested in learning more about or using learning management systems.

Please see our main wiki page for more information

Installation

Detailed instructions for installation and configuration of Canvas are provided on our wiki.