Security and privacy

HTTP to HTTPS converter for external content

Picture of Dan Marsden
Re: HTTP to HTTPS converter for external content
Group DevelopersGroup Moodle Course Creator Certificate holdersGroup Particularly helpful MoodlersGroup Translators

Personally I think the "new content" issue should be resolved in the editor on saving content - it would be nice if it could do an automatic check and fix anything it can fix automatically and then warn the user perform some validation to report to the user that to embed the content they must find an https link.

Then we can just use an admin tool to fix "existing" content and don't need to rely on a filter that adds performance overheads to the site.

Average of ratings: -
Picture of John Okely
Re: HTTP to HTTPS converter for external content
Group Moodle HQGroup Testers

Yeah the filter is added overhead. Then again, if we don't implement a filter, we will need the admin tool to run during upgrade, then again once the admin finishes putting together their whitelist.

The filter would work nicely for existing content, allowing the admin to locate items that don't work and gradually add them to the whitelist, without having to run the tool each time.

Average of ratings: -