-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
3.8.4, 3.9.1, 3.9.6, 3.10.3, 3.10.4, 3.11, 4.0, 4.1.8, 4.3
-
MOODLE_310_STABLE, MOODLE_311_STABLE, MOODLE_38_STABLE, MOODLE_39_STABLE, MOODLE_400_STABLE, MOODLE_401_STABLE, MOODLE_403_STABLE
-
MDL-69282_master
-
Easy
-
We've encountered by chance, that some students have subscribed their own Moodle calendar in Moodle itself. It was resulting in more than 1000 times the same calendar entry for this particular user. As it was hourly importing the Moodle calendar itself in Moodle.
I think this is a missing part in the validation and should not be permitted. Further I've noticed that you can input just a "word" as URL and it will not lead to an error in this form validation. And it also doesn't checkes the blocked hosts defined in the HTTP security settings of Moodle.
This part should be covered as well.