MDL-68486 auth_shibboleth: Prevent using dataroot files in convert_data
commit6c51299e30b657d16056dca3efe4cf2dc27c41b7
authorMihail Geshoski <mihail@moodle.com>
Fri, 27 Nov 2020 01:44:43 +0000 (27 09:44 +0800)
committerJake Dallimore <jake@moodle.com>
Wed, 13 Jan 2021 04:34:24 +0000 (13 12:34 +0800)
tree04130e1f2783e311f2b14275cdc7f1d429318118
parent81cb8b9f094d8e8d48f9c457526c30d246d993ce
MDL-68486 auth_shibboleth: Prevent using dataroot files in convert_data

Prevents configuring the 'Data modification API' (convert_data) setting
to use files located within the $CFG->dataroot directory as it exposes
the site to security risks.
auth/shibboleth/README.txt
auth/shibboleth/classes/admin_setting_special_convert_data_configfile.php [new file with mode: 0644]
auth/shibboleth/lang/en/auth_shibboleth.php
auth/shibboleth/settings.php
auth/shibboleth/upgrade.txt