Details

    • Type: Task Task
    • Status: Resolved Resolved
    • Priority: Major Major
    • Resolution: Obsolete
    • Affects Version/s: Current Version
    • Fix Version/s: None
    • Component/s: OIOIOI
    • Labels:
      None

      Description

      Students are to be allowed to ask for teacher permissions, so that they can run contests while taking part in others. We have to make sure that giving these permissions are safe enough to be given to untrusted users.

        Issue Links

          Activity

          Hide
          Michał Łazowik added a comment - - edited
          They are not. See blocking tasks.
          Show
          Michał Łazowik added a comment - - edited They are not. See blocking tasks.
          Hide
          Gerrit Gerrit added a comment -
          Change I6925252509f9e79caa7e81c2f3c24b2001e1ee82, patchset 1
          https://gerrit.sio2project.mimuw.edu.pl/2563

          SIO-1780 Unmark dashboard message as safe html

          We plan to give teacher permissions to regular users, we cannot trust that they
          will not use this for XSS.

          We might want to enable markdown in that field.

          Change-Id: I6925252509f9e79caa7e81c2f3c24b2001e1ee82
          Show
          Gerrit Gerrit added a comment - Change I6925252509f9e79caa7e81c2f3c24b2001e1ee82, patchset 1 https://gerrit.sio2project.mimuw.edu.pl/2563 SIO-1780 Unmark dashboard message as safe html We plan to give teacher permissions to regular users, we cannot trust that they will not use this for XSS. We might want to enable markdown in that field. Change-Id: I6925252509f9e79caa7e81c2f3c24b2001e1ee82
          Hide
          Szymon Acedański added a comment -
          This issue has been automatically closed as Obsolete due to no activity for 365 days.

          Feel free to reopen it or create a new one if it's still relevant.
          Show
          Szymon Acedański added a comment - This issue has been automatically closed as Obsolete due to no activity for 365 days. Feel free to reopen it or create a new one if it's still relevant.

            People

            • Assignee:
              Szymon Acedański
              Reporter:
              Mateusz Śmiech
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: