Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67758

Missing $CFG->wwwroot in messageoutput_airnotifer payload sent to Airnotifier prevents intended use checks

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • 3.7.5, 3.8.2
    • 3.7.4, 3.8.1, 3.9
    • Messages
    • MOODLE_37_STABLE, MOODLE_38_STABLE, MOODLE_39_STABLE
    • MOODLE_37_STABLE, MOODLE_38_STABLE
    • MDL-67758-master
    • Hide

      This issue should be tested by the apps team since Airnotifier isn't testable yet (see MDL-66706).

      How to test this issue

      • In a local Airnotifier installation edit the hooks/moodle.py file
      • Add debugging so the "extra" field in the requestPayLoad variable is displayed in the Airnotifier log
      • Reset the Airnotifier server
      • In a Moodle installation with this patch applied generate a Push notification (sending a private message to an user with the mobile notifications enabled)
      • Review the Airnotifier log and check that in the "extra" field the wwwroot field is set and contains the Moodle site URL
      Show
      This issue should be tested by the apps team since Airnotifier isn't testable yet (see  MDL-66706 ). How to test this issue In a local Airnotifier installation edit the hooks/moodle.py file Add debugging so the "extra" field in the requestPayLoad variable is displayed in the Airnotifier log Reset the Airnotifier server In a Moodle installation with this patch applied generate a Push notification (sending a private message to an user with the mobile notifications enabled) Review the Airnotifier log and check that in the "extra" field the wwwroot field is set and contains the Moodle site URL

      The $CFG->wwwroot is necessary to check for good use of the provided Access keys by Airnotifier (the access key should be only used by the site that originally requested it).

      Right now, this value is not passed to the Airnotifier public instance so it is very easy to use the same "Access key" for multiple different sites (even if they are not registered).

       

       

            dpalou Dani Palou
            jleyva Juan Leyva
            Juan Leyva Juan Leyva
            Eloy Lafuente (stronk7) Eloy Lafuente (stronk7)
            Pau Ferrer Pau Ferrer
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 40 minutes
                1h 40m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.