-
Bug
-
Resolution: Fixed
-
Major
-
4.2.1
-
MOODLE_402_STABLE
-
MOODLE_403_STABLE
-
MDL-78649-master -
-
6
-
Team Hedgehog 2023 Sprint 3.2, Team Hedgehog 2023 Sprint 3.3
It has been detected that the element types of PARAM_TEXT, that are set on the communication provider's form fields, are not being identified at the time of param cleaning.
When cleaning, the types are not yet set for communicationroomname and matrixroomtopic. This means that the default is applied of 'raw'. This is not ideal and some refactoring may be required to the communication api to ensure the provider form fields have their element types respected.
To reproduce issue:
- Ensure the experimental communication subsystem is enabled.
- Go to a course and edit the settings.
- Scroll down to the Communication section and enter something like ABC<script>alert('hello');</script>DEF into both 'Room name' and 'Room topic'
- After saving the form, you would expect the params to be cleaned. You can see correct cleaning if you enter a similar value into the 'Course full name' field.
- has a non-specific relationship to
-
MDL-78553 Move course level Communication settings into their own page
- Closed