-
Improvement
-
Resolution: Done
-
Minor
-
4.0.2
-
-
MOODLE_400_STABLE
-
MOODLE_401_STABLE
-
Moodle App 4.1.0
In most places of the app we only use the auto-login feature if the URL to open belongs to the site, but there are some cases where this doesn't happen and it can be a security issue.
We should always make sure that the redirect URL belongs to the site before using the auto-login feature.