search

owncloud / moodle-repository_ocis

GNU General Public License v3.0
3 stars 0 forks source link

Remove moodle's core security settings from source code #104

Closed amrita-shrestha closed 5 months ago

amrita-shrestha commented 5 months ago

Description

Previously, the source code included Moodle's core security configurations to facilitate automatic provisioning of port and URL blocking/allowing. However, adhering to Moodle standards, this practice is not permissible. Thus, exploring alternative methods to clear blocked URLs and ports for testing purposes:

    if (strtolower(getenv('MOODLE_DISABLE_CURL_SECURITY')) === 'true') {
        set_config('curlsecurityblockedhosts', '');
        set_config('curlsecurityallowedport', '');
    }

Related issue

individual-it commented 5 months ago

@amrita-shrestha can we do the same thing with sslproxy? https://tracker.moodle.org/browse/MDL-80616