mahara-contributors team mailing list archive

[Aaron Wells <1397736@xxxxxxxxxxxxxxxxxx>]

Hugh tells me that he's found some bugs in SafeCurl and has submitted
patches for those, so we may want to hold off on this one until those
bugs are patched.

** Changed in: mahara/1.10
    Milestone: None => 1.10.2

** Changed in: mahara/1.8
    Milestone: None => 1.8.7

** Changed in: mahara/1.9
    Milestone: None => 1.9.5

** Changed in: mahara/15.04
    Milestone: None => 15.04.0

** Changed in: mahara/1.10
   Importance: Undecided => High

** Changed in: mahara/1.8
   Importance: Undecided => High

** Changed in: mahara/1.9
   Importance: Undecided => High

** Changed in: mahara/15.04
   Importance: Undecided => High

** Changed in: mahara/1.10
       Status: New => Confirmed

** Changed in: mahara/1.8
       Status: New => Confirmed

** Changed in: mahara/1.9
       Status: New => Confirmed

** Changed in: mahara/15.04
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1397736

Title:
  Use SafeCURL in external RSS block

Status in Mahara ePortfolio:
  Confirmed
Status in Mahara 1.10 series:
  Confirmed
Status in Mahara 1.8 series:
  Confirmed
Status in Mahara 1.9 series:
  Confirmed
Status in Mahara 15.04 series:
  Confirmed

Bug description:
  For better security in the external RSS feed block, we should be using
  a library like SafeCURL to help guard against attacks.:
  https://github.com/fin1te/safecurl

  See also bug 1394820

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1397736/+subscriptions