prevent changes to settings via POST

prevent changes to settings via POST

updated test name

updated based on feedback

removed comments

AA-280: Add assignment type to date blocks serialization

[BD-29] [TNL-7263] Support Anonymous Courseware Access

Fix issue with `SameSite=None` cookies from being blocked when `django_cookies_samesite.middleware.CookiesSameSite` is enabled for `devstack_docker` environment.

AA-124: Give Learning MFE enroll alert information

Set `SESSION_COOKIE_SAMESITE=Lax` for `devstack_docker` environment by default to allow login to LMS service.  This is a fix for `devstack_docker` default value set to `Lax` for `DCS_SESSION_COOKIE_SAMESITE`. It was defaulting to `SameSite=None` which requires a secure site which `localhost` site does not by default.  Setting this `SameSite` cookie attribute to something other than `None` will continue to allow login to the LMS for `devstack_docker` environment.  Regards to #23671 and https://discuss.openedx.org/t/lti-xblock-and-samesite/759/16

 
Set `SESSION_COOKIE_SAMESITE=Lax` for `devstack_docker` environment by default to allow login to LMS service.  This is a fix for `devstack_docker` default value set to `Lax` for `DCS_SESSION_COOKIE_SAMESITE`. It was defaulting to `SameSite=None` which requires a secure site which `localhost` site does not by default.  Setting this `SameSite` cookie attribute to something other than `None` will continue to allow login to the LMS for `devstack_docker` environment.  Regards to #23671 and https://discuss.openedx.org/t/lti-xblock-and-samesite/759/16

 

Mergeback PR from private to public.

BUG: fixes for saml provider config/data lookup

Fixes session caching for enterprise portal links by only caching for auth'd learners

AA-127: Created MFE Outline Tab Waffle Flag

Moved data.py out into the parent's dirctory i.e learning_sequences directory to avoid circular import issue which is occuring when we try to import data.py from models.py.

A new CourseContext model is created, which is responsible for housing course specific fields e.g course_visibility.

Fix XSS while prepending html

Fix xss in base site template

Fix xss in date

Fix xss while rendering file-upload

Fix xss in edit member template

* fix keyerror with request.session

* improve the conditional

Note: The team settled on raising a 404 when the waffle flag is disabled.
Upon receiving the 404, the frontend will redirect to the LMS.

This reverts commit 6980291d.

Revert "[BD-10] [DEPR-92] Remove directories that includes pattern library."

This reverts commit e4f28deb.

[BD-14]"Source from Library" XBlock

* display message banner guiding user to their enterprise LP if enabled

* adding new sass class name to use same styling as recovery email alert

MST-333

* Commits:
  Bucket users regardless of enrollment in courseware MFE experiment

Add SSO Records endpoint for support tools