Multiple security fixes and fix a regression with teacher's student search

Today's update (83ca572) brings with it the following changes:

Security issues

  • Fix cross-site scripting security issue in message system.
  • Fix cross-site-scripting security issue in preview_content(r).
  • Fix cross-site-scripting security issue in user profile related to user's name.

Bugfixes

  • Because of a regression from a previous security fix, some teachers weren't able to find their students when searching for them in the new_message(r) contact manager form. This should now be rectified.
Spinner

Login