MDL-75326 h5p: require sesskey to toggle library enabled state.

h5p/classes/output/libraries.php

@@ -93,11 +93,13 @@ class libraries implements renderable, templatable {
                     $version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [
                         'id' => $version->id,
                         'action' => 'disable',
+                        'sesskey' => sesskey(),
                     ]);
                 } else {
                     $version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [
                         'id' => $version->id,
                         'action' => 'enable',
+                        'sesskey' => sesskey(),
                     ]);
                 }
                 $installed[] = $version;

h5p/libraries.php

@@ -66,6 +66,8 @@ if ($deletelibrary) {
 }
 
 if (!is_null($action)) {
+    require_sesskey();
+
     if ($action == 'enable' || $action == 'disable') {
         // If action is enable or disable, library id is required too.
         $libraryid = required_param('id', PARAM_INT);