MDL-84706 bigbluebuttonbn: improved authorization and mitigate CSRF risks

mod/bigbluebuttonbn/classes/instance.php

@@ -1150,7 +1150,8 @@ EOF;
         return new moodle_url('/mod/bigbluebuttonbn/bbb_view.php', [
             'action' => 'logout',
             'id' => $this->get_cm()->id,
-            'courseid' => $this->get_cm()->course // Used to find the course if ever the activity is deleted
+            'courseid' => $this->get_cm()->course, // Used to find the course if ever the activity is deleted
+            'sesskey' => sesskey(),
             // while the meeting is running.
         ]);
     }
@@ -1189,6 +1190,7 @@ EOF;
             'action' => 'join',
             'id' => $this->get_cm()->id,
             'bn' => $this->instancedata->id,
+            'sesskey' => sesskey(),
         ]);
     }