Freecodecamp: Final Projects Accept Any Link as a Solution

[AlvaroLuken]

Describe the bug
(SORRY IF REPEAT) Any arbitrary link is accepted as a solution for the Responsive Web Design Projects (and thus I am assuming for all other project pages). Links like https://facebook.com and https://www.amazon.com are accepted as solutions. Curriculum is checked off only if user selects 'Submit and go to next project'.

To Reproduce
Steps to reproduce the behavior:

1. Go to 'https://learn.freecodecamp.org/responsive-web-design/responsive-web-design-projects/build-a-product-landing-page'
2. Click on 'Solution input bar and submit any arbitrary link... for example: Google, Facebook, Amazon.com (will require full https://www....)
3. Accepts the link as a solution and checks it off in your curriculum ONLY IF YOUR PRESS ADVANCE, if you press back nothing happens.

Expected behavior
Should maybe reject any non-codepen/github links? I know individual project checking is not done, but at least this adds a bit of integrity to these 'final projects'.

Screenshots

Desktop (please complete the following information):

• OS: Mac OSX latest version
• Browser: Chrome
• Version: 75.0.3770.100 (Official Build) (64-bit)

Additional context
Could create cookie in codepen doc that is saved with link ONLY IN THE CASE OF ALL TESTS PASSING then when user submits link in page, link is checked against saved cookie and test is accepted. Anyone can game the system in this case and the value of the certificate drops. I don't mean it in a bad way, just want the best for this incredible page!

[vishwasnavadak]

This is a good catch.

I just checked for other project pages like frontend library and data visualization projects, all of them accept random links too. This makes anyone claim any certificates easily.

[Ronkiro]

There are three issues about this same topic.
Issue #34763 was closed in favor of #35015, in which ended up with this issue #35054.
I think you could share some ideas around those issues. I think your solution is nice, but would still open space for empty pens, for example...

[RomeoRaven]

Just want to add that I was not finding a way to submit my project for checking correctly via Codepen and found this github issue. Tested on my own project and the 'Solution' field even accepts non-URL input. Example...

[vishwasnavadak]

The issue @RomeoRaven is because of the type="url" being set on the input. That is the reason it treats the file path as the URL.

Even though type="url" does validate most of the cases, we might need to have a regex pattern validation for validating this type of edge cases.

[raisedadead]

Thanks for reporting the issue, I am closing this in favor of #35054.

Thanks for all your suggestions, but programmatic evaluation while being flexible about any platform / language stack of your choice is a very difficult problem. We rely on honor and reporting instead.

That said, we are also moving to a project-based evaluation in our next iteration of the curriculum. You can read about it on or forum: Forum