** Changed in: mahara
Status: New => Fix Committed
** Changed in: mahara
Assignee: (unassigned) => Ruslan Kabalin (ruslan-kabalin)
** Changed in: mahara
Milestone: None => 1.4.0
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/687597
Title:
Make sure that Mahara does not trust the portfolio content exported from
Moodle
Status in Mahara ePortfolio:
Fix Committed
Bug description:
As tracked in http://tracker.moodle.org/browse/MDL-25619, Moodle 2.0 does not
clean output HTML when exporting content to a remote portfolio. From Moodle
point of view, the portfolio system is responsible for the input sanitization
regardless the source. Please make sure that you handle the data exported from
Moodle correctly - it may contain malicious content, nasty Javascript etc.
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
