Code Locked / Unlocked button is a confusing UX for beginners
See original GitHub issueIssue Description
The “Code Locked” button on beta shows up on the very first challenge: “Say Hello to HTML Elements”. I think this has to do with recent security improvements to prevent javascript injection via the URI? In any case, there is no code in my URI. The URI is https://beta.freecodecamp.org/en/challenges/basic-html-and-html5/say-hello-to-html-elements. I am guessing maybe it’s because saved code was found in local storage? Checking local storage for code to be executed is surely way beyond the ability of someone who just started the course?
Being that this the very first challenge, this is definitely confusing and beyond the expertise of a beginner to decide whether or not code is secure. We are asking them to make a decision they have not been trained to make. I was even confused as an experienced developer. What should I be looking for to understand if the code is trusted? Certainly it’s not my <h1>
element or anything else in the text editor?
Also, it doesn’t match the instructions which talk about clicking the "Run tests" button"
.
How can we improve user experience while still keeping it secure?
Browser Information
- Browser Name, Version: Chrome, 63
- Operating System: Ubuntu
- Mobile, Desktop, or Tablet: Desktop
Screenshot
Issue Analytics
- State:
- Created 6 years ago
- Comments:40 (40 by maintainers)
Top GitHub Comments
@joker314 feel free to shoot me an email berkeley@freecodecamp.org
Sure
From within a component
A single action from an epic
Multiple actions from a single epic
Hope this helps 👍
Happy coding!