online-judge
online-judge copied to clipboard
Contest Links Expose Problem Codes to Non-Contestants
trafficstars
On the contest ranking page, the links to the problems as well as the links in the cells give a 404, but still give away the problem codes used in the contest.
Proposed fixes: remove links for users who can't view the problem (because they aren't in the contest and they don't have view access to the problem).
I swear we had a ticket for this already, but I can't find it now...
Anyway, yes, agreed, the contest scoreboard should not have links for non-participating, non-privileged users.
This is probably a good-first-issue, too (I think)