Damyon Wiese b0a583932a MDL-50784 ajax: Require a sesskey for all ajax requests. ...

This needs to be done before we can expose any webservices that
change state, or return private info to ajax (to prevent CSRF).

Currently there are no webservices exposed to ajax that meet these
criteria - so this issue is to prevent future security issues.

2015-07-13 16:49:06 +02:00

..

build

MDL-50784 ajax: Require a sesskey for all ajax requests.

2015-07-13 16:49:06 +02:00

src

MDL-50784 ajax: Require a sesskey for all ajax requests.

2015-07-13 16:49:06 +02:00