Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
3.5.2, 3.6, 3.7
-
MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE
-
MOODLE_35_STABLE, MOODLE_36_STABLE
-
MDL-64240-master -
Description
Some students make forum posts in Internet Explorer and search for images using BING. Then they drag and drop (or copy/paste) the images from BING into the forum text box and save it.
The forum posts appear to contain some javascript in addition to the raw image data. This causes the count_words internal function in Moodle to report a much larger number of words.
If you edit/save the post, the code is cleaned by Moodle and the word count returns to "normal", but the initial save, "cleaning" is not done by Moodle which may be a possible security issue.
Here is a link to an example post-message copied from the database directly.