Update to 3.9.2

Upstream changes:
3.9.2
General fixes and improvements

    MDL-63375 - Workshop rubric display issue in grid view
    MDL-60574 - Atto editor undo/redo (crtl-y/z) can sometimes wipe all content
    MDL-26401 - Byte order mark at the beginning of import groups file fail the process with the confusing error message
    MDL-51709 - Gradebook single view has a hard coded name format in grade view
    MDL-40227 - Numerical question in lesson - decimal fractions problem
    MDL-66665 - Reopened assignment shown as graded by student themselves
    MDL-61215 - Badge and user profile picture using an svg file doesn't display
    MDL-66810 - Allow microphone and camera to be accessed from content iframe
    MDL-69079 - Activity chooser does not display if site contains plugins missing from disk
    MDL-68178 - Email-based self-registration confirmation email is not re-sent
    MDL-67831 - The Message reply box is not fixed
    MDL-66670 - list bullet points are cut off in some browsers
    MDL-69246 - Question manual grading: floating point issues can lead to valid grades being rejected
    MDL-65819 - Contact request email must respect the receiver's language
    MDL-68715 - Condition: "Completion of other courses" is set without the course creator intervention
    MDL-52052 - Import grades with an empty identifier causes bad upload but it doesn't show error message
    MDL-55340 - Export labels from feedback
    MDL-67671 - Backup step 2 show type options missing activity names
    MDL-67440 - \core\task\analytics_cleanup_task extremely slow on Postgres site.
    MDL-68210 - Unable to edit user overrides if assignment is not available to student
    MDL-66900 - "Alternate image" gets removed upon editing course category settings.
    MDL-66755 - After editing a forum post, a user is unsubscribed from the discussion
    MDL-66626 - Assignfeedback_editpdf sending infinite request when page ready is not equal to page number of combined pdf
    MDL-69297 - File-based Assignments shouldn't accept submissions without any files
    MDL-69168 - Recently Accessed Items block uses stock LTI icon even if it has been customized
    MDL-69215 - load_fontawesome_icon_map web service does not respect current theme
    MDL-69414 - 3.9 regression - "Drag and drop onto image" flips in RTL lang.
    MDL-69336 - Collapsing columns in dynamic tables no longer functions
    MDL-55299 - Single and double quotes encoded in HTML characters in downloaded files
    MDL-68618 - Forum idnumber update not working
    MDL-68558 - Admin can get stuck on the Plugin dependencies check failure page
    MDL-68444 - Calendar accessibility followups
    MDL-69401 - Book's chapter title not showing max length limit
    MDL-69358 - The 'backup_cleanup_task' task deletes records related to incompleted adhoc tasks
    MDL-69375 - LTI Names and Roles Provisioning Service generates Link headers with incorrect format
    MDL-66818 - Portfolio "export whole discussion" button should not be visible if the user has inadequate permissions
    MDL-66707 - Forum too eager to mark messages as read (threaded view)
    MDL-69296 - Pressing cancel on a resource activity settings page may result in a file download
    MDL-69241 - Participants page pagination doesn't reset when applying filters
    MDL-69199 - Complete user report incorrectly shows last modified time of quiz attempts, not time submitted
    MDL-69112 - Underscore in folder name breaks assign feedback multi-upload
    MDL-69089 - Content bank allows empty names
    MDL-69069 - Insufficient colour contrast for in-place editable and drag and drop upload status
    MDL-69054 - Edit button for badge backpack not displayed when version is OBv1.0
    MDL-68964 - Swapping theme in chat window causing notice error
    MDL-68889 - Recently accessed courses not functioning on small view ports
    MDL-68731 - Forum digest processing does not mark posts as read
    MDL-68706 - Course Custom field text area cant be emptied
    MDL-42434 - Chat activity needs user help
    MDL-69448 - Course Copy in 3.9 and 3.9.1 not working for teacher with extended permissions
    MDL-69204 - User A can see the privacy and policies + data retention summary link on user B's profile page
    MDL-69645 - Preferences window can be opened on Safe Exam Browser Mac clients during quizzes using manual configuration

Accessibility improvements

    MDL-69394 - Insufficient colour contrast for calendar event colour indicators
    MDL-68344 - File Picker: focus lost on upload
    MDL-69391 - Some dropdown menus have insufficient colour contrast between text and background
    MDL-69389 - Insufficient colour contrast between link text and normal text
    MDL-69387 - Completion checkbox images don't have sufficient colour contrast
    MDL-69214 - Error reading database on Participants page if site:accessallgroups is set to prohibit
    MDL-69115 - Course and category management page accessibility followups
    MDL-69114 - Insufficient colour contrast for .*-info classes
    MDL-69111 - Forum grading panel cannot be used when zoomed to 400%

For developers

    MDL-69068 - Allow behat generators to be pivoted

Security fixes

    MSA-20-0011 Stored XSS via moodlenetprofile parameter in user profile
    MSA-20-0012 Reflected XSS in tag manager
    MSA-20-0013 "Log in as" capability in a course context may lead to some privilege escalation
    MSA-20-0014 Denial of service risk in file picker unzip functionality
    MSA-20-0015 Chapter name in book not always escaped with forceclean enabled

3.9.1
General fixes and improvements

    MDL-60827 - OAuth 2 still expecting email verification after "Require email verification" has been disabled
    MDL-68436 - Atto RecordRTC (record audio/video) plugin only works in the first editor on a page
    MDL-69049 - Moodle 3.9 upgrade fails due to missing column in privacy plugins if standalone GDPR plugins were used
    MDL-69106 - convert_submissions task with asynchronous document conversion cannot be completed by cron
    MDL-69109 - Theme icons are lost after web upgrade in 3.9 or theme change in other versions
    MDL-68992 - Update minimal age of digital consent according to current legislation
    MDL-68215 - Make the Activity results block styling consistent with other blocks
    MDL-69110 - Sorting does not work anymore in non-dynamic tables
    MDL-66899 - Regrading quiz attempts should be logged
    MDL-69077 - The capabilities moodle/question:tag* are not visible in the "Check permissions" page in the activity context
    MDL-69021 - Alert links hard to distinguish
    MDL-69099 - Some scheduled tasks are incorrectly labelled as "Disabled"
    MDL-67294 - Choosing bulk removal of empty submissions causes an error
    MDL-69031 - Missing Moodle app disable features settings for 3.9

Accessibility improvements

    MDL-69008 - Accessibility issues in the pagination bar template

Security improvements

    MDL-69047 - Content bank status message should be hard coded

Security fixes

    MSA-20-0008 Reflected XSS in admin task logs filter
    MSA-20-0009 Course enrolments allowed privilege escalation from teacher role into manager role
    MSA-20-0010 yui_combo should mitigate denial of service risk

3.9
Please visit: https://docs.moodle.org/dev/Moodle_3.9_release_notes#

(wen)