Moodle

Prefixing text with a slash character suppresses username in chat.

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 1.6, 1.7
  • Fix Version/s: 1.6.5, 1.7.2, 1.8
  • Component/s: Chat
  • Labels:
    None
  • Affected Branches:
    MOODLE_16_STABLE, MOODLE_17_STABLE
  • Fixed Branches:
    MOODLE_16_STABLE, MOODLE_17_STABLE, MOODLE_18_STABLE

Description

A Moodle user, Ross Hendricks, reported the problem in this thread:

http://moodle.org/mod/forum/discuss.php?d=64830#292099

If chat participants prefix their comment in chat with a slash character, their name is not displayed (this appears to be due to /whatever being treated as a special case, as with /me). Apparently some of his students are using this for annoyance purposes.

I posted a possible fix in that thread as well, but it was a quick one-off. There may be better ways of dealing with the issue.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Jon Papaioannou added a comment -

Fixing it right now. Not a security issue, though.

Show
Jon Papaioannou added a comment - Fixing it right now. Not a security issue, though.
Hide
Permalink
Tony Hursh added a comment -

>Not a security issue, though.

I was thinking in terms of a phishing-style attack where a student replaces his picture with the teacher's picture, suppresses his name, and tries to get the other students to do something bad.

Not that serious, but still...

Thanks for the fix!

Show
Tony Hursh added a comment - >Not a security issue, though. I was thinking in terms of a phishing-style attack where a student replaces his picture with the teacher's picture, suppresses his name, and tries to get the other students to do something bad. Not that serious, but still... Thanks for the fix!

People

Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Moodle. Try JIRA - bug tracking software for your team.