1. 01 Mar, 2012 2 commits
  2. 29 Feb, 2012 2 commits
  3. 28 Feb, 2012 3 commits
  4. 27 Feb, 2012 2 commits
  5. 24 Feb, 2012 1 commit
  6. 23 Feb, 2012 2 commits
    • Zach Wily's avatar
      don't bypass filename escaping in FileInContext; fixes #6912 · 4b6678c4
      Zach Wily authored
      FileInContext (used by the zip importer) was bypassing the filename= setter
      for Attachment, so when using attachment_fu, sanitize_filename was not getting
      called on the filename. This resulted in us generating S3 urls with characters
      in them like filename[0].txt. That normally worked fine. However, Firefox
      would escape those characters when redirected to a URL like that, which would
      cause a signature mismatch with S3.
      
      This commit stops bypassing the filename= setter so files uploaded as zip
      files and in migrations have escaped filenames. Because of difficulties
      testing S3 attachments, the included spec is weak.
      
      This also includes a migration that will rename attachments with []" in their
      filenames, and make a copy of the S3 object to match.
      
      There is also an unrelated spec refactor around faking out a portion of the
      code about S3.
      
      test plan:
       * Enable S3
       * Create a ZIP file with a file in it with a name like test[0].bin
       * Upload that ZIP file to your files are, choosing to unpack the ZIP contents
       * Verify that you can download the extracted file using firefox
       * Also verify that the attachment's filename is escaped in the db
      
      Change-Id: I54fc0682b64a9e0021b4b41236f8cab168a0e56e
      Reviewed-on: https://gerrit.instructure.com/8875
      
      Tested-by: default avatarHudson <hudson@instructure.com>
      Reviewed-by: default avatarBracken Mosbacker <bracken@instructure.com>
      Reviewed-by: default avatarBrian Palmer <brianp@instructure.com>
      4b6678c4
    • Cody Cutrer's avatar
      detect pseudonyms that are in the transition state for trusted · 6bd15519
      Cody Cutrer authored
      fixes #7166
      
      test plan:
       * create a user in another account
       * login with that user at the default account
       * should get a warning about needing to log in
         at the correct account
      
      Change-Id: I976d51f0e3f18f0b4a9c7303bf9f71668c8c1f2b
      Reviewed-on: https://gerrit.instructure.com/8745
      
      Tested-by: default avatarHudson <hudson@instructure.com>
      Reviewed-by: default avatarBracken Mosbacker <bracken@instructure.com>
      6bd15519
  7. 22 Feb, 2012 3 commits
  8. 21 Feb, 2012 1 commit
  9. 20 Feb, 2012 8 commits
  10. 18 Feb, 2012 2 commits
  11. 17 Feb, 2012 13 commits
  12. 16 Feb, 2012 1 commit