MDL-17611 removing XSS risk from mod/feedback:complete, because this capability is...

diff --git a/mod/feedback/db/access.php b/mod/feedback/db/access.php
index ccf5d2806ace3510e0cc8dc5bef34ec0d451b1c7..faa7e96e1f33b3692949aa151257d484c4ef575b 100644 (file)
--- a/mod/feedback/db/access.php
+++ b/mod/feedback/db/access.php
@@ -49,7 +49,7 @@ $mod_feedback_capabilities = array(
     
     'mod/feedback:complete' => array(
 
-        'riskbitmask' => RISK_SPAM | RISK_XSS,
+        'riskbitmask' => RISK_SPAM,
 
         'captype' => 'write',
         'contextlevel' => CONTEXT_MODULE,

diff --git a/mod/feedback/version.php b/mod/feedback/version.php
index 5159844661cfcc407988015ae8c9d8dcb0dc44e7..506b5e61bd474db5de4d16568bd3d87662e9c07e 100644 (file)
--- a/mod/feedback/version.php
+++ b/mod/feedback/version.php
@@ -10,7 +10,7 @@
 */
 
    
-    $module->version = 2008073003; // The current module version (Date: YYYYMMDDXX)
+    $module->version = 2008073004; // The current module version (Date: YYYYMMDDXX)
     $module->requires = 2008072401;  // Requires this Moodle version
     $feedback_version_intern = 1; //this version is used for restore older backups
     $module->cron = 0; // Period for cron to check this module (secs)