Autolab
Autolab copied to clipboard
Course management service that enables auto-graded programming assignments.
`local_submit` and `log_submit` (formally `official_submit` and `unofficial_submit`) are poorly understood and ought to be better documented. Notably, `local_submit` was recently the cause of https://github.com/autolab/Autolab/security/advisories/GHSA-g7x7-mgrv-f24x Potential context: #126
Currently, there is insufficient validation that a user-defined assessment hook takes the correct number of arguments (arity) or that it returns the expected type. This can lead to a difficult-to-recover...
In at least several controllers, `.nil?` checks are performed after calling `.find( ... )`. However, `find` throws an exception if an `id` is not found, so the checks are never...
Current `autolab.rake` file has several issues - It populates fake submissions (`load_submissions_for`) with old submission path - Should update `s.filename` to `"#{i.to_s}_#{a.handin_filename}"` and `submission_path` to `File.join(assessment_handin_dir, user.email, s.filename)` - `delete_course`...
Even if an Autolab instance does not support the default signup and login mechanisms, those routes are still visible and will cause errors. It would be beneficial to the user...