Moodle

Quiz in 'secure' mode display security alert in IE7

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Duplicate
  • Affects Version/s: 1.5.4, 1.6.5, 1.7.3, 1.8.3
  • Fix Version/s: None
  • Component/s: Quiz
  • Labels:
    None
  • Environment:
    Windows, Apache, MySQL
  • Database:
    MySQL
  • Affected Branches:
    MOODLE_15_STABLE, MOODLE_16_STABLE, MOODLE_17_STABLE, MOODLE_18_STABLE

Description

Timed quizzes display a security message in IE7: "Do you want to allow this webpage to access your clipboard?" See attachment for details. Firefox and IE6 do not have this problem.

This issue was found in Moodle 1.5.3. Oher versions may also be affected.

Issue Links

Activity

Hide
Howard Miller added a comment -

Found on the web (and not yet tested) - workaround for this problem:

Change Tools : Internet Options : Security : Custom level : Scripting : Allow programmatic clipboard access from Prompt to Enable

Show
Howard Miller added a comment - Found on the web (and not yet tested) - workaround for this problem: Change Tools : Internet Options : Security : Custom level : Scripting : Allow programmatic clipboard access from Prompt to Enable
Hide
Tim Hunt added a comment -

Yes, be why is the Moodle quiz trying to access the clipboard? It should not be.

Show
Tim Hunt added a comment - Yes, be why is the Moodle quiz trying to access the clipboard? It should not be.
Hide
Howard Miller added a comment -

It's surprising (quick Google check) how many other applications have run into this. So it seems that accessing the clipboard is more common than one might think. I'll have a look at the code and see if I can work out why it does it.

Show
Howard Miller added a comment - It's surprising (quick Google check) how many other applications have run into this. So it seems that accessing the clipboard is more common than one might think. I'll have a look at the code and see if I can work out why it does it.
Hide
Howard Miller added a comment -

I cannot reproduce this error, no matter what the setting in Internet Options. I am testing with the 7.0 release version of IE7, so I wonder if this is some sort of bug that has been fixed. Can you try upgrading your IE7 to the latest version and see what happens.

I couldn't find any reference to JavaScript clipboard access in the timer code (on any recent Moodle version).

Show
Howard Miller added a comment - I cannot reproduce this error, no matter what the setting in Internet Options. I am testing with the 7.0 release version of IE7, so I wonder if this is some sort of bug that has been fixed. Can you try upgrading your IE7 to the latest version and see what happens. I couldn't find any reference to JavaScript clipboard access in the timer code (on any recent Moodle version).
Hide
Timothy Takemoto added a comment -

Are you sure it is not the secure window? My version of the secure window code, by Rob butner called "blockit" on the forums, which I gave to Martin so that he could base the Moodle secure window javascript upon it, accesses the keyboard and empty the keyboard buffer.

Show
Timothy Takemoto added a comment - Are you sure it is not the secure window? My version of the secure window code, by Rob butner called "blockit" on the forums, which I gave to Martin so that he could base the Moodle secure window javascript upon it, accesses the keyboard and empty the keyboard buffer.
Hide
Howard Miller added a comment -

Well spotted Tim. It certainly does exhibit this behavior in secure mode. Of course, if you want to clear the buffer then there isn't much you can due due to the increased security in IE7.

It remains to be seen if this is indeed the same problem as is reported here. When I tried it, I got the warning before any questions were displayed, so I'm guessing it's not.

Show
Howard Miller added a comment - Well spotted Tim. It certainly does exhibit this behavior in secure mode. Of course, if you want to clear the buffer then there isn't much you can due due to the increased security in IE7. It remains to be seen if this is indeed the same problem as is reported here. When I tried it, I got the warning before any questions were displayed, so I'm guessing it's not.
Hide
Tim Hunt added a comment -

Secure mode strikes again. I don't really understand secure mode, so am unlikely to be able to fix this myself. Therefore, patches welcome.

Show
Tim Hunt added a comment - Secure mode strikes again. I don't really understand secure mode, so am unlikely to be able to fix this myself. Therefore, patches welcome.
Hide
Dieter Blancquaert added a comment -

Issue is confirmed in version 1.8.2+.

Show
Dieter Blancquaert added a comment - Issue is confirmed in version 1.8.2+.
Hide
Erik Hanson added a comment -

Does anyone know if this problem exists in 1.9.x?

Thanks.

Show
Erik Hanson added a comment - Does anyone know if this problem exists in 1.9.x? Thanks.
Hide
Tim Hunt added a comment -

This issue almost certainly still affects 1.9, because this part of the code is the same in 1.8 and 1.9. I would still like someone who understands this sort of JavaScript to tackle this problem, because I don't have these skills, and don't have the time to learn.

Show
Tim Hunt added a comment - This issue almost certainly still affects 1.9, because this part of the code is the same in 1.8 and 1.9. I would still like someone who understands this sort of JavaScript to tackle this problem, because I don't have these skills, and don't have the time to learn.
Hide
Kenneth Arnold added a comment -

I can verify that this problem exists in version 1.9.2 on IE7. I can also verify that the workaround "Change Tools : Internet Options : Security : Custom level : Scripting : Allow programmatic clipboard access from Prompt to Enable" does fix it.

Show
Kenneth Arnold added a comment - I can verify that this problem exists in version 1.9.2 on IE7. I can also verify that the workaround "Change Tools : Internet Options : Security : Custom level : Scripting : Allow programmatic clipboard access from Prompt to Enable" does fix it.
Hide
Susan Mangan added a comment -

Bug still exists
v.1.9.5 - IE7
Student clicks 'No' to prompt and quiz shuts down.

Show
Susan Mangan added a comment - Bug still exists v.1.9.5 - IE7 Student clicks 'No' to prompt and quiz shuts down.
Hide
Sharon Goodson added a comment -

Occurred for the first time for us just yesterday - recently upgraded from 1.9.4 to 1.9.6. We also realized that admin can no longer print (using the browser) quiz review/attempt.

In 1.9.4 we used secure view, admin could print quiz review/attempts and there was never a clipboard access question

In 1.9.6 we are using secure view, admin can not print or copy quiz review/attempts and the clipboard access question initially appeared. (IE 7, 8 and FireFox)

(We can print the complete quiz from the "item analysis page," however). For admin, it acts as if it is in a secure window, but it is not. We are also warned about a time limit and required to enter the password when attempting Preview Quiz - don't know if that's related, but thought I'd mention it.)

Show
Sharon Goodson added a comment - Occurred for the first time for us just yesterday - recently upgraded from 1.9.4 to 1.9.6. We also realized that admin can no longer print (using the browser) quiz review/attempt. In 1.9.4 we used secure view, admin could print quiz review/attempts and there was never a clipboard access question In 1.9.6 we are using secure view, admin can not print or copy quiz review/attempts and the clipboard access question initially appeared. (IE 7, 8 and FireFox) (We can print the complete quiz from the "item analysis page," however). For admin, it acts as if it is in a secure window, but it is not. We are also warned about a time limit and required to enter the password when attempting Preview Quiz - don't know if that's related, but thought I'd mention it.)
Hide
Michael de Raadt added a comment -

Thanks for reporting this issue.

We have detected that this issue has been inactive for over a year has been recorded as affecting versions that are no longer supported.

If you believe that this issue is still relevant to current versions (2.1 and beyond), please comment on the issue. Issues left inactive for a further month will be closed.

Michael d;

lqjjLKA0p6

Show
Michael de Raadt added a comment - Thanks for reporting this issue. We have detected that this issue has been inactive for over a year has been recorded as affecting versions that are no longer supported. If you believe that this issue is still relevant to current versions (2.1 and beyond), please comment on the issue. Issues left inactive for a further month will be closed. Michael d; lqjjLKA0p6
Hide
Tim Hunt added a comment -

Actually, there have been duplicate reports of this which were fixed. (Sorry, I can't be bothered to search for the specific issue numbers now) so I am closing this.

Show
Tim Hunt added a comment - Actually, there have been duplicate reports of this which were fixed. (Sorry, I can't be bothered to search for the specific issue numbers now) so I am closing this.

Dates

  • Created:
    Updated:
    Resolved: