Releases: openedx/xblock-lti-consumer
9.0.2 Translate PII Sharing Confirmation
9.0.1 New Translations
9.0.0 Validation on launch redirect URIs
fix[olive]: backport LTI 1.3 grade injection vulnerability fix
What's Changed
- Merge pull request from GHSA-7j9p-67mm-5g87 by @mtyaka in #331
New Contributors
Full Changelog: v4.5.0...4.5.1
Fix inappropriate instructions for inline PII sharing consent dialog
This release fixes inappropriate instructions displayed when collecting PII sharing consent before an inline LTI launch. Previously, the instructions said, "Click OK to have your [username (and) e-mail address] sent to a 3rd party application. Click Cancel to return to this page without sending your information." The latter sentence does not make sense in the context of an inline launch, because there is no cancel button. This commit modifies the inline PII sharing consent dialog to say, "Click OK to have your [username (and) e-mail address] sent to a 3rd party application."
v8.0.0
refactor: fix module-containing imports
What's Changed
Full Changelog: 7.2.3...7.3.0
Fix bug in rending buttons and message in PII sharing consent dialog.
This release fixes a bug in the way that the PII sharing consent dialog renders. The bug resulted in the "OK" and "Cancel" buttons as well as the text of the PII sharing consent prompt appearing inside an inappropriate component when there was more than one LTI component in a unit.
7.2.2 Fixes LTI 1.3 grade injection vulnerability
7.2.1 URL configuration support
feat: new release for url settings (#323)