Challenge correctness is derived from fragile output text

[ionfwsrijan]

Problem

Coding challenge submissions are marked correct based on output text containing "Passed".

Evidence

Affected code:

• backend/controllers/challenge.controller.js

The result logic checks output/error content rather than structured test execution results.

Impact

A malicious or buggy execution result can include the word "Passed" and be treated as correct even if tests failed. This compromises challenge integrity and leaderboards.

Expected fix

• Return structured execution results from the judge/test runner
• Require all test cases to pass explicitly
• Store failed-case details separately
• Add tests proving "Passed" in stdout alone does not mark a submission correct

[ionfwsrijan]

@ThePlator You may review and assign me this issue

[sanudking]

Hey! This looks like a great issue to work on. I'm a first-year CSE student at NIT Jalandhar participating in GSSoC 2026. I have knowledge in Javascript and would like to take this up. Can I get assigned? I'll submit a PR within a day or two. 🙏

[saurabhhhcodes]

I can take this up under GSSoC if available.

Plan:

• keep the fix scoped to backend/controllers/challenge.controller.js and its tests
• derive correctness from structured execution/test result fields rather than substring matching stdout/stderr
• preserve the existing stored submission shape where possible
• add a regression test proving output text containing Passed does not mark a failed execution correct
• run the focused backend test plus syntax/diff checks before opening a PR

[sanudking]

Hi! 👋 I'm a CSE student participating in GSSoC 2026 and I'd love to work on this. I have experience with Javascript and believe I can implement this effectively. Could you please assign this to me? I'll share my approach before starting. 🚀

[vipul674]

I would like to work on this under GSSoC'26. Please assign it to me.