General discussion

Security of .H5P files

Submitted by janicholson on Sun, 10/27/2019 - 22:32
Forums: 
General discussion

The question has come up about uploading .H5P files into our LMS that could potentially have been tampered with - had JavaScript or similar injected into them. I understand the Library would block JavaScript in the Content part of the file but there are other parts of the .H5P package that requires JavaScript. This JavaScript  runs on a student's computer and if altered could do a number of potetially damaging things. My question is twofold:

1. Are there precausions to ensure a .H5P file has not been tampered with and had code added to it?

Can't change the editor CSS style

Submitted by alegoffa on Sat, 10/26/2019 - 12:46
Forums: 
General discussion

Hi everyone,

I want to modify the editor style to match my colors and font. I'm using Wordpress and I'm not a developer. So far I have:

  1. Created a php file and uploaded it to /wp-content/plugins/ to install the plugin h5pmods.
  2. Created the following CSS:

<code>html.h5p-iframe .h5p-content {

   font-size: 20px; /* size of the font used in H5P content */

  color: #5a5a5a; /* color of the H5P content */ 

}</code>

and uploaded it to /wp-content/uploads/h5p/

Pages