Anonymous users can click Run even though the API requires authentication

[mahmudshayan2248]

Problem

The problem page guards Submit but not Run, while /submissions/run uses JwtAuthGuard. Disable/redirect Run for logged-out users or intentionally make custom runs public.

Source

Observed in the current main branch during a repository audit.