Moodle

Normalise activity intros and formats database fields, use modname_supports() for all modedit features

Details

  • Type: Task Task
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 2.0
  • Fix Version/s: 2.0
  • Component/s: General
  • Labels:
    None
  • Affected Branches:
    MOODLE_20_STABLE
  • Fixed Branches:
    MOODLE_20_STABLE

Description

Each activity uses different db field for intro (intro, description, summary), some of them do not support text formats, yet other do unnecessary text cleaning

Activity

Hide
Tim Hunt added a comment -

Petr, why no introtrust field? (I was looking at the quiz changes.) I thought one of the whole points of this was to make it safe to let students do more without creating XSS risks.

Show
Tim Hunt added a comment - Petr, why no introtrust field? (I was looking at the quiz changes.) I thought one of the whole points of this was to make it safe to let students do more without creating XSS risks.
Hide
Petr Škoda (skodak) added a comment -

Adding introtrust would also require significant changes in handling of embedded files. XSS from uploaded files is much more difficult to prevent compared to HTML text

Show
Petr Škoda (skodak) added a comment - Adding introtrust would also require significant changes in handling of embedded files. XSS from uploaded files is much more difficult to prevent compared to HTML text
Hide
Petr Škoda (skodak) added a comment -

Should be done, thanks for the feedback.

Show
Petr Škoda (skodak) added a comment - Should be done, thanks for the feedback.

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: