mahara-contributors team mailing list archive

[François Marier <francois@xxxxxxxxxx>]

Also, some places (the help popups) use the session key whereas they
should just be anonymous and public GET requests. (There is no need to
pass login credentials there.)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/714967

Title:
  Remove remaining session tokens from urls into forms

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  Mahara still submits the session key in urls in a few places.  These
  should be turned into forms which submit the sesskey using POST.