H5P design issue: Library upload overwrites platform-wide content

Hi all,

I noticed something that appears to be a fundamental design issue with how H5P handles updates to library versions through the upload of user generated H5P files. I see this behaviour in edu-sharing and Wordpress. When uploading an H5P file that contains a newer library (patch) version, H5P adopts that version globally. From that point on, the renderer uses this library version for all H5P content on the platform, including existing content created by other users.

This effectively means that any user with upload permissions can overwrite libraries platform-wide by uploading a manipulated H5P file, altering the rendering of all other users' content. I tested this with a rather harmless modification, that renders different colors for MC questions and adds a custom text. But I see this could also be used to expose the repository to vandalism or maybe add malicious code?

I guess this is intentional behavior. How do others handle this in multi-user environments?

Thanks,

Raphael