Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-80532

Viewing quickstart guide in course overview sends your sesskey to external site

XMLWordPrintable

      When creating the View Quickstart guide button in the Course overview block, we don't specify the button $method parameter, which means it defaults to POST, which means our user sesskey property is included in the form submission

      This should be avoided in general if not actually required, but especially here as we are sending it to a third-party site

            pholden Paul Holden
            pholden Paul Holden
            Andrew Lyons Andrew Lyons
            Amaia Anabitarte Amaia Anabitarte
            Kim Jared Lucas Kim Jared Lucas
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 34 minutes
                1h 34m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.