-
Bug
-
Resolution: Duplicate
-
Minor
-
None
-
4.5.3
-
None
-
MOODLE_405_STABLE
I found that the AJAX call the manual enrollment method uses to enroll people in a course is a GET instead of a POST.
Accordingly to this guide
https://moodledev.io/general/development/policies/security/crosssite-request-forgery#use-http-correctly
this behavior can be a problem.
I think this issue can be related with https://tracker.moodle.org/browse/MDL-79661
- duplicates
-
MDL-79661 Sesskey presence in ajax call for enrol manual
-
- Open
-