search

virtual-labs-archive / computer-graphics-iiith

This repository contains sources to Computer Graphics lab.
https://cse18-iiith.vlabs.ac.in/
Other
2 stars 234 forks source link

Clipping: Line_Quiz #201

Open shradhasehgal opened 5 years ago

shradhasehgal commented 5 years ago

Defect description:

The answers for the Clipping: Line quiz are stored in a JavaScript file, evaluate.js, which is stored on the front-end and can be viewed by anyone. This poses a significant threat to the security of answer validation, therefore defeating the purpose of the quiz.

Steps to reproduce the issue:

  1. Go to the quiz of Clipping: Line in Computer Graphics
  2. Open the console of your browser
  3. Open the 'Sources' tab and click on evaluate.js to view it (or go to http://cse18-iiith.vlabs.ac.in/exp7/evaluate.js)
  4. View the answers in lines 6-12

Expected result:

All answers should be stored on the server and validated through functions on the back-end.

Actual result:

All answers are stored in a JavaScript file on the front-end which can be viewed by anyone.

Screenshot:

answhy