From 712391f96bc82ca0911edb7404d4fecd3fa6a401 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Sun, 5 Mar 2023 11:12:31 +0100 Subject: [PATCH] MDL-76680 core: disable $USER->ignoresesskey on next page --- lib/setup.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/setup.php b/lib/setup.php index ccb2b58bbe8..6463e5db22a 100644 --- a/lib/setup.php +++ b/lib/setup.php @@ -827,6 +827,8 @@ if (empty($CFG->sessiontimeoutwarning)) { $CFG->sessiontimeoutwarning = 20 * 60; } \core\session\manager::start(); +// Prevent ignoresesskey hack from getting carried over to a next page. +unset($USER->ignoresesskey); // Set default content type and encoding, developers are still required to use // echo $OUTPUT->header() everywhere, anything that gets set later should override these headers.