[MDL-58109] preventexecpath is not checked in security report - Moodle Tracker

XML

Word

Printable

Affected Branches:
MOODLE_33_STABLE
Fixed Branches:
MOODLE_33_STABLE
Pull from Repository:
https://github.com/brendanheywood/moodle
Pull Main Branch:
~~MDL-58109~~-preventexecpath-check
Pull Main Diff URL:
https://github.com/moodle/moodle/compare/0f59b6dd75...brendanheywood:MDL-58109-preventexecpath-check
Testing Instructions:

Hide

In config.php toggle preventexecpath on and off and check the security report at /report/security/ to ensure it warns when it's off.

Show
In config.php toggle preventexecpath on and off and check the security report at /report/security/ to ensure it warns when it's off.

CFG->preventexecpath is a pretty useful way to harden a moodle, this should be checked in the security report

Participants:: Brendan Heywood, CiBoT, Dan Marsden, David Monllaó, Eloy Lafuente (stronk7), Juan Leyva