moodle-webhooks Missing sesskey checks at the administration page

Missing sesskey checks at the administration page

Open mudrd8mz opened this issue 7 years ago • 2 comments

See https://tracker.moodle.org/browse/CONTRIB-7096 for details

Dec 18 '17 09:12 mudrd8mz

The sesskey check is added to the main page.

Do you want to check sesskey on the recovery page and in the editor?

Dec 30 '17 19:12 valentineus

Thanks. sesskey should be checked everywhere where the Moodle database is modified based on user's input.

Jan 02 '18 11:01 mudrd8mz