Element pl-xss-safe: present potentially malicious student code

Questions below were designed to showcase the different features of pl-xss-safe. The goal of pl-xss-safe is to allow instructors to display to students formatted HTML with potentially malicious source, such as student-submitted content.


The typical use of this element would be to provide, in the submission panel, a formatted view of a student's HTML or Markdown code. In that case, a pl-file-editor or pl-file-upload element provides the interface for the user to input the code in the question panel, while the same file name is used in the pl-xss-safe element to identify the file.

What is the meaning of life?

ans1.html

The element pl-xss-safe can also be used to format Markdown code by using language="markdown".

Note that the preview attribute of pl-file-editor also provides a similar functionality in the question panel, and also provides the same XSS filtering functionality as pl-xss-safe.

What is the meaning of life?

ans2.md

The element pl-xss-safe also supports content that does not come from a file, using the contents attribute. A typical use-case for this processing is when a regular element is used that does not save its content in a file, such as a pl-string-input. In that case, contents="" provides the content to be displayed.

Provide the input This is a **bold** text to make the word bold.

Correct answer

Student view placeholder

In student views this area is used for assessment and score info.
Tools

Staff information

Question

Title:
Element pl-xss-safe: present potentially malicious student code

Variant

Started at:
2026-08-04 22:42:52 (CDT)
Duration:
0s
Show/Hide answer
{}
History
dec frac
rad deg