Skip to content

Pull requests: openedx/openedx-platform

New pull request New
204 Open 37,046 Closed
204 Open 37,046 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix(extract_archive): reject zip/tar bombs in safe_extractall open-source-contribution PR author is not from Axim or 2U
#38346 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix(profile_images): reject PIL decompression bombs on profile upload open-source-contribution PR author is not from Axim or 2U
#38345 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix: pin CELERY_ACCEPT_CONTENT to json-only to block unsafe payloads open-source-contribution PR author is not from Axim or 2U
#38344 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix: set SECURE_REFERRER_POLICY and COOP defaults for SecurityMiddleware open-source-contribution PR author is not from Axim or 2U
#38343 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix(track): use hmac.compare_digest for segmentio webhook secret check open-source-contribution PR author is not from Axim or 2U
#38342 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix(notification_prefs): return opaque error for unsubscribe token failures open-source-contribution PR author is not from Axim or 2U
#38341 opened Apr 10, 2026 by kingoftech-v01 Loading…
4 tasks
1
fix(contentstore): harden git export URL validator against option injection and SSRF open-source-contribution PR author is not from Axim or 2U
#38340 opened Apr 10, 2026 by kingoftech-v01 Loading…
4 tasks
1
fix(password_policy): stop logging password SHA-1 hash in HIBP client open-source-contribution PR author is not from Axim or 2U
#38339 opened Apr 10, 2026 by kingoftech-v01 Loading…
3 tasks
1
fix(verify_student): redact access keys and signatures in mismatch logs open-source-contribution PR author is not from Axim or 2U
#38338 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix: add SecurityMiddleware and deploy-time security checks open-source-contribution PR author is not from Axim or 2U
#38337 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix: escape user-controlled data in certificate templates and ACE bulk email open-source-contribution PR author is not from Axim or 2U
#38336 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(sessions): authenticate session payloads with HMAC open-source-contribution PR author is not from Axim or 2U
#38335 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(lti_provider): validate nonce/timestamp and outcome URL to prevent replay and SSRF open-source-contribution PR author is not from Axim or 2U
#38334 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(deps): remove dead babel-plugin-transform-class-properties and bump bootstrap to 4.6.2 open-source-contribution PR author is not from Axim or 2U
#38333 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(api): correct IsUserInUrlOrStaff permission class to return boolean open-source-contribution PR author is not from Axim or 2U
#38332 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(lms): default S3 object ACL to private in production open-source-contribution PR author is not from Axim or 2U
#38331 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix: use secrets module for security-sensitive random values open-source-contribution PR author is not from Axim or 2U
#38330 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix(lms): gate debug endpoints behind DEBUG setting open-source-contribution PR author is not from Axim or 2U
#38329 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
fix: resolve OLX pointer tags for external XBlocks at runtime level open-source-contribution PR author is not from Axim or 2U
#38328 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix(olx): persist subsection prerequisites across export/import open-source-contribution PR author is not from Axim or 2U
#38327 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix(ccx): generate CCX course outlines in LMS process open-source-contribution PR author is not from Axim or 2U
#38326 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix: seed ItemBankMixin.make_selection to eliminate selection race open-source-contribution PR author is not from Axim or 2U
#38325 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix(courseware): restore anonymous video viewing on public courses open-source-contribution PR author is not from Axim or 2U
#38324 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix(content_libraries): mark pasted unit children as can_stand_alone=False open-source-contribution PR author is not from Axim or 2U
#38323 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
fix(content_libraries): keep collection num_children in sync after item updates open-source-contribution PR author is not from Axim or 2U
#38322 opened Apr 10, 2026 by kingoftech-v01 Loading…
1
1
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.