Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
3.9.11, 3.10.8, 3.11.3
-
None
-
MOODLE_310_STABLE, MOODLE_311_STABLE, MOODLE_39_STABLE
Description
When the config setting is forced eg. $CFG->bigbluebuttonbn_shared_secret = 'thesecret'; in config.php, it is possible to view this value on the settings page.
With the implementaion of https://tracker.moodle.org/browse/MDL-63734 in Moodle 3.9, if the setting was of type admin_setting_configpasswordunmask then the value would not be visible and will prevent leaking the secret.