Ensure that subproblems don't have their problem number sanitized to an int

openlab-at-city-tech / webworkqa

WeBWorK integration for WordPress and BuddyPress

GNU General Public License v2.0

4 stars 2 forks source link

Ensure that subproblems don't have their problem number sanitized to an int #37

Closed boonebgorges closed 7 years ago

boonebgorges commented 8 years ago

See https://openlab.citytech.cuny.edu/groups/openlab-webwork-integration-project/forum/topic/webwork-ol-testing-discussion/page/2/#post-39032

boonebgorges commented 7 years ago

I've reviewed the code and I don't see anywhere where this kind of sanitization would be taking place. Subproblems are processed as blobs of HTML, and are sanitized only against security vulnerabilities (XSS, etc). Otherwise, the content is untouched from what WeBWorK sends over.

If we run across a verifiable instance of this problem in the wild, let's reopen with details.