data.js gives quiz answers away

A Savvy learner in our org showed us a way to look directly at the data.js file of an SL3 course, which happily, if awkwardly gives the answers away to assessment questions in the learning object:

1. Launch a course through LMS

2. View source on the module window

3. Click on the link within: <script SRC="story_content/user.js" TYPE="text/javascript"></script>

3. Change the url which pops up from "blah blah/story_content/user.js" to "blah blah/html5/data/js/data.js"

4. Do a text search on the question, then look for "status":"correct".  Which will highlight all the correct answers in the asset.  It is awkward to cross reference it with question and answer ID's, but it's all there.

It seems as though learners should not be able to view this document.  Maybe this is an LRS issue.  


Any help would be greatly appreciated!


4 Replies
Calvin Lo

SCORM is not really cheat-proof which has been known for years. Easiest way to cheat is to change the score/completion in your browser before it gets sent to the LMS. Truth is, as a student who wants to learn, would you cheat yourself to a passing score and skip the learning process?

however, if it's an exam required for certification you'd rather want to go with your LMS' quiz feature.