Skip to content

E
edx-platform
Commit d12e7e88 by Waheed Ahmed
Options

Fixed allowing for execution of arbitrary Javascript in student response. 

ORA-256
parent a077dc81
Showing with 1 additions and 0 deletions
common/lib/xmodule/xmodule/js/src/combinedopenended/display.coffee
...@@ -368,6 +368,7 @@ class @CombinedOpenEnded ...@@ -368,6 +368,7 @@ class @CombinedOpenEnded
@rub.initialize(@location) @rub.initialize(@location)
@child_state = 'assessing' @child_state = 'assessing'
@find_assessment_elements() @find_assessment_elements()
@answer_area.val(response.student_response)
@rebind() @rebind()
answer_area_div = @$(@answer_area_div_sel) answer_area_div = @$(@answer_area_div_sel)
answer_area_div.html(response.student_response) answer_area_div.html(response.student_response)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment