Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User can see the right answer before replying - can we avoid it? #68

Open
TiagoJacobs opened this issue Feb 3, 2021 · 2 comments
Open

Comments

@TiagoJacobs
Copy link

Hello, thanks for this amazing solution.

However I have one concern using it. If user inspect the network tab, it can see the content.json file, and this way see the expected answer for each question.

Is there any way to avoid this?

image

@TiagoJacobs
Copy link
Author

TiagoJacobs commented Feb 3, 2021

Just to be clear, an exploit that any student could use would be adding something like this to chrome's console:


Object.keys(window.H5PIntegration.contents).map(content => JSON.parse(window.H5PIntegration.contents[content].jsonContent).cards.map(card => card.answer) )

So it will get all the answers:
image

@otacke
Copy link
Contributor

otacke commented Feb 3, 2021

@tdjac0bs You are correct. There will always be ways to get hold of the solutions when using software that evaluates the answers in the browser.
The H5P core team has server-side evaluation on the roadmap for H5P however, see https://h5p.org/roadmap

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants