Bug DOM XSS (Cross-site Scripting) in show.blade.php

[lavie3k]

Hello,

I have found a security hole in the result display function. Line 40: {!! $result->question->code_snippet }}

Please use: {{ $result->question->code_snippet }}

[PovilasKorop]

@lavie3k this assumes that the question details will come from the administrator and that administrator won't hack his own system :)