Loading...

XML

Word

Printable

Type: Bug
Resolution: Not a bug
Priority: Minor
Fix Version/s: None
Affects Version/s: 1.8
Component/s: Assignment (2.2)
Labels:
None
Environment:
Mamp (osx, mysql, apache, php)

Database:

MySQL
Affected Branches:
MOODLE_18_STABLE

It is possible to inject js into the description of new assignments by using a simple script tag.

will be (partly) resolved by

MDL-58639 Remove RISK_XSS from capabilities, instead rely on moodle/site:trustcontent

Reopened

Assignee:: Petr Skoda

Reporter:: Hans Wolters (Inactive)

Tester:: Nobody (Inactive)

Participants:: Hans Wolters, Petr Skoda

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 23/Apr/07 11:38 AM

Updated:: 19/Apr/17 9:20 PM

Resolved:: 23/Apr/07 12:18 PM