Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-80532

Viewing quickstart guide in course overview sends your sesskey to external site

    XMLWordPrintable

Details

    Description

      When creating the View Quickstart guide button in the Course overview block, we don't specify the button $method parameter, which means it defaults to POST, which means our user sesskey property is included in the form submission

      This should be avoided in general if not actually required, but especially here as we are sending it to a third-party site

      Attachments

        Activity

          People

            pholden Paul Holden
            pholden Paul Holden
            Andrew Lyons Andrew Lyons
            Amaia Anabitarte Amaia Anabitarte
            Kim Jared Lucas Kim Jared Lucas
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 34 minutes
                1h 34m

                Clockify

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.