| commit | b0a583932a735bc6a205d0c203a94b6fdd94995c | |
| author | Damyon Wiese <damyon@moodle.com> | |
| Mon, 13 Jul 2015 02:15:17 +0000 (13 10:15 +0800) | ||
| committer | Eloy Lafuente (stronk7) <stronk7@moodle.org> | |
| Mon, 13 Jul 2015 14:49:06 +0000 (13 16:49 +0200) | ||
| tree | 86291cbd5de9a52fa15d183c0ba716c0ab4945eb | treesnapshot (tar.gz zip) |
| parent | 5fceb11e6c9025b374949b8b75c0cbd142bdbab8 | commitdiff |
MDL-50784 ajax: Require a sesskey for all ajax requests.
This needs to be done before we can expose any webservices that
change state, or return private info to ajax (to prevent CSRF).
Currently there are no webservices exposed to ajax that meet these
criteria - so this issue is to prevent future security issues.
This needs to be done before we can expose any webservices that
change state, or return private info to ajax (to prevent CSRF).
Currently there are no webservices exposed to ajax that meet these
criteria - so this issue is to prevent future security issues.
| lib/ajax/service.php | diffblobblamehistory | |
| lib/amd/build/ajax.min.js | diffblobblamehistory | |
| lib/amd/src/ajax.js | diffblobblamehistory |