Instructors can currently upload arbitrary HTML/Javascript as the exercise text. It would be desirable to validate the uploaded hHTML with a white list.
JSoup?
Log in to post a comment.