search

ucfopen / Materia

Engage students with easily embedded apps for online courses. Supercharge your course with compelling experiences and game mechanics.
https://ucfopen.github.io/Materia-Docs/
GNU Affero General Public License v3.0
37 stars 32 forks source link

Response column in Score Screen HTML encoding some characters #491

Open zachberry opened 9 years ago

zachberry commented 9 years ago

Tested in Crossword, notice the < characters:

screenshot 2015-06-01 10 51 10

nathaned commented 5 years ago

Few notes:

  1. The widgets provide the response (from the player), so this would be a per-widget issue.
  2. This is no longer an issue in Crossword (all non-alphanumeric characters are blocked automatically)
  3. For the widgets where this is still an issue (example: word guess), it looks like they intentionally do this for security purposes. A better solution would probably be just to strip/block the < and > entirely, rather than replace them with &lt; and then go back.