search

strix / canvas-hack

Discovering different vulnerabilities in Canvas
22 stars 13 forks source link

Selector fix #4

Closed jakegraves closed 6 years ago

jakegraves commented 6 years ago

Fixes issue where jquery selectors would select undefined element. Allows "matching questions" answers to be recorded and selected.

unlimited

strix commented 6 years ago

Haha haven't looked at this code in years. Thanks for refreshing it! Were you able to test using the answer key on the actual test? I'm curious to know if it still works or if canvas has come up with a solution to fix this. If so, then this could still be used to get an answer key to study without having to do the busy work of trying to find the answers online or from the book.

jakegraves commented 6 years ago

Not on the actual test, no. I only have access to the practice quizzes at this point, so that's what I used. I wrote a message to Rob and gave him a link to this pull request, so maybe he'd be willing to give access. I dunno. Definitely worth asking!

One thing I did notice is that Canvas keeps track of all the events on the page, apparently monitoring in localStorage if you tab away from or leave the browser window.

A possible feature might be to do a setInterval to clear those events before they are sent off.

jakegraves commented 6 years ago

I leave the merging to you, good sir, since this is your project.

strix commented 6 years ago

Cool cool. Nice catch on noticing the tracked events in local storage. Definitely something to consider