Fix typo

Safe Exam Browser support reform:

- capture both RequestHash and ConfigKeyHash from the request headers and use both to validate the request. This enables to choose to just enforce the plain conf, instead of the whole conf+binaries combination, which is platform-specific

- support storing multiple keys, required e.g. to support multiple platform-specific keys

- make suppling of the config file optional

- extend automated tests to cover new features

- clanup redundant index

- return config file using its stored filename

file upgrade-1.5.1-2.0.0.sql was initially added on branch oacs-5-10.

Working on changelog [skip ci]

Continue working on release documents [skip ci]

Correct hash challenging:

actually, the hash sent by the browser changes based on the requested URL, so it does not make sense to set it directly.

fix once more handling of internal redirects in error cases

many thanks to thomas renner!

Maintain revision date for "update_attribute_from_slot"

This is not a full-featured version, since it does not update the

modifying user and the modifying IP (since this data is not

always available). But this version is at least good enough

for experimenting and checking for unwanted side-effects.

xotcl-core: upadated version number to 5.10.0d40

xowf: upadated version number to 5.10.0d39

    • -2
    • +3
improve comments, make logging output more regular

    • -8
    • +6
Make sure the file is downloaded with a .seb extension

Avoid double encoding of base URL

file upgrade-1.4.2-1.5.0.sql was initially added on branch oacs-5-10.

file safe-exam-browser-procs.tcl was initially added on branch oacs-5-10.

Basic backend support for Safe Exam Browser (https://safeexambrowser.org/):

via the API is possible to associate a Safe Exam Browser configuration and its validation key to

the proctored object. The proctored page will then take care of enforcing that, if the safe exam

browser is in use, the supplied request header matches with the configuration and the URL.

When such match fails, we now return the configuration file to the browser, so that users can

open it and restart their session properly configured.

* build.yml, appveyor.yml: Add 8.7a5 branch to build matrices.

* nsf.c (Nsf_Init): Plumb a small memory leak due to not clearing mp_int data. Make sure _not_ to use mp_clear (TIP 538).

improve comments and reguarity of log messages

    • -5
    • +7
no need to ask answer_manager for package_id

    • -2
    • +1
fix editing bug

Merge branch 'master' of ssh://alice.wu.ac.at/usr/local/src/git-repo/nsf

* ChangeLog-2.3.0-2.4.0.log, Announce2.4.0: Continued work on release files [skip ci]

Prefer bind variables in sql idiom

add missing variable which was deleted during the refactoring of the exam protocol

    • -0
    • +1
Do not localize the file name: it is not expected that message keys are expanded here as we do for the file title

Port sanitizing of upload file name from downstream

Remove message keys sanitizing, which does not belong here

add bulk-notification functionality to participants_table

    • -3
    • +3
adapt personal-notification interface to support bulk messaging

Merge branch 'master' of ssh://alice.wu-wien.ac.at/usr/local/src/git-repo/nsf

Minor cleanup

- reduce strlen operations

- reduce hard-coded constants

- perfer Tcl_Obj based interfaces of string based ones (opens opportunities for special objtypes)