From a1eadfd4681a4bb9d0c45f4f24b651ba649e42da Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sun, 26 Oct 2025 19:53:07 +0100
Subject: [PATCH 01/26] Manage JS frontend libraries with yarn

---
 .github/jobs/baseinstall.sh |  7 +++++++
 doc/manual/develop.rst      |  2 +-
 webapp/.gitignore           |  1 +
 webapp/Makefile             | 11 +++++++++--
 webapp/package.json         |  3 +++
 webapp/yarn.lock            |  4 ++++
 6 files changed, 25 insertions(+), 3 deletions(-)
 create mode 100644 webapp/package.json
 create mode 100644 webapp/yarn.lock

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 50db376a52..40d1ab2103 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -28,6 +28,13 @@ composer install --no-scripts |tee "$ARTIFACTS"/composer_out.txt
 cd ..
 section_end
 
+section_start "Install JS frontend dependencies"
+cd webapp
+apt-get update; apt-get install -y yarnpkg
+yarnpkg install
+cd ..
+section_end
+
 section_start "Set simple admin password"
 echo "password" > ./etc/initial_admin_password.secret
 echo "default login admin password password" > ~/.netrc
diff --git a/doc/manual/develop.rst b/doc/manual/develop.rst
index 10952ad37f..f7c7471990 100644
--- a/doc/manual/develop.rst
+++ b/doc/manual/develop.rst
@@ -41,7 +41,7 @@ already listed under
 
   sudo apt install autoconf automake bats \
     python3-sphinx python3-sphinx-rtd-theme fontconfig python3-yaml \
-    latexmk texlive-latex-recommended texlive-latex-extra tex-gyre
+    latexmk yarnpkg texlive-latex-recommended texlive-latex-extra tex-gyre
 
 For Fedora use::
 
diff --git a/webapp/.gitignore b/webapp/.gitignore
index 70a4c6b3b2..dedaef8acc 100644
--- a/webapp/.gitignore
+++ b/webapp/.gitignore
@@ -8,6 +8,7 @@
 /var/log/*
 !var/log/.gitkeep
 /vendor/
+/node_modules/
 
 ###> phpunit/phpunit ###
 /phpunit.xml
diff --git a/webapp/Makefile b/webapp/Makefile
index 5eac62ea13..4578e6c1da 100644
--- a/webapp/Makefile
+++ b/webapp/Makefile
@@ -12,7 +12,7 @@ SUBDIRS = config
 domserver: composer-dump-autoload
 
 # Install PHP dependencies
-composer-dependencies:
+composer-dependencies: node-dependencies
 ifeq (, $(shell command -v composer 2> /dev/null))
 	$(error "'composer' command not found in $(PATH), install it via your package manager or https://getcomposer.org/download/")
 endif
@@ -20,7 +20,7 @@ endif
 # not generated yet, which is needed to run the post-install scripts.
 	composer $(subst 1,-q,$(QUIET)) install --prefer-dist -o -a --no-scripts --no-plugins
 
-composer-dependencies-dev:
+composer-dependencies-dev: node-dependencies
 	composer $(subst 1,-q,$(QUIET)) install --prefer-dist --no-scripts --no-plugins
 
 # Dump autoload dependencies (including plugins)
@@ -36,6 +36,13 @@ vendor/autoload_runtime.php:
 composer-dump-autoload-dev:
 	composer $(subst 1,-q,$(QUIET)) dump-autoload
 
+node-dependencies:
+ifeq (, $(shell command -v yarn || command -v yarnpkg 2> /dev/null))
+	$(error "neither 'yarnpkg' nor 'yarn' command found in $(PATH), install it via your package manager or https://yarnpkg.com/cli/node")
+endif
+	@YARN_CMD=$(shell command -v yarn || command -v yarnpkg); \
+  $$YARN_CMD install
+
 # Run Symfony in dev mode (for maintainer-mode):
 .env.local:
 	@echo "Creating file '$@'..."
diff --git a/webapp/package.json b/webapp/package.json
new file mode 100644
index 0000000000..18a1e415e5
--- /dev/null
+++ b/webapp/package.json
@@ -0,0 +1,3 @@
+{
+  "dependencies": {}
+}
diff --git a/webapp/yarn.lock b/webapp/yarn.lock
new file mode 100644
index 0000000000..fb57ccd13a
--- /dev/null
+++ b/webapp/yarn.lock
@@ -0,0 +1,4 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+

From 0cf9afbb4605a17f095770dd4bbeb86ac1f79120 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sun, 14 Sep 2025 16:53:34 +0200
Subject: [PATCH 02/26] Display some unrelated formula for easier testing

---
 webapp/templates/jury/clarification.html.twig | 9 +++++++++
 webapp/templates/jury/menu.html.twig          | 2 ++
 2 files changed, 11 insertions(+)

diff --git a/webapp/templates/jury/clarification.html.twig b/webapp/templates/jury/clarification.html.twig
index e7e7c4d24b..b04d3ab454 100644
--- a/webapp/templates/jury/clarification.html.twig
+++ b/webapp/templates/jury/clarification.html.twig
@@ -18,7 +18,16 @@
             </div>
         {% endif %}
 
+
+
         {% for clar in list %}
+            <div style="height: 100px;"></div>
+            <div>Pure body:<br>{{ clar.body }}</div>
+            <div>Markdown converted:<br>{{ clar.body | markdown_to_html }}</div>
+            <div>DOMjudge Markdown converted:<br>{{ clar.body | domjudge_markdown_to_html }}</div>
+            <div>Sanitized:<br>{{ clar.body | sanitize_html('app.clarification_sanitizer') }}</div>
+            <div>All:<br>{{ clar.body | domjudge_markdown_to_html | sanitize_html('app.clarification_sanitizer') }}</div>
+            <div>DOMjudge all:<br>{{ clar.body | domjudge_markdown_to_html | sanitize_html('app.clarification_sanitizer') }}</div>
             <div class="card mb-3 {% if clar.from_team is not defined %}border-primary{% endif %}">
                 <div class="card-header">
                     <div class="row">
diff --git a/webapp/templates/jury/menu.html.twig b/webapp/templates/jury/menu.html.twig
index 12bddba889..b523955afc 100644
--- a/webapp/templates/jury/menu.html.twig
+++ b/webapp/templates/jury/menu.html.twig
@@ -7,6 +7,8 @@
 
     {% set current_route = app.request.attributes.get('_route') %}
 
+    <span>Euler's identity: $( e^{i\pi} + 1 = 0 )$</span>
+    <span>$$\vec{a} \times \vec{b} = \begin{vmatrix} \mathbf{i} & \mathbf{j} & \mathbf{k} \\ a_x & a_y & a_z \\ b_x & b_y & b_z \end{vmatrix}$$</span>
     <div class="collapse navbar-collapse" id="menuDefault" data-update-url="{{ path('jury_ajax_updates') }}">
         <ul class="navbar-nav me-auto">
 

From 75e501aea8e5c83bf6be4712287db0843980ee66 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Thu, 30 Oct 2025 22:39:13 +0100
Subject: [PATCH 03/26] Display clarifications when queue has been removed

---
 webapp/templates/jury/export/clarifications.html.twig | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/webapp/templates/jury/export/clarifications.html.twig b/webapp/templates/jury/export/clarifications.html.twig
index 0ee58eacb3..65bcb418d8 100644
--- a/webapp/templates/jury/export/clarifications.html.twig
+++ b/webapp/templates/jury/export/clarifications.html.twig
@@ -45,7 +45,11 @@
             <div class="page-break"></div>
             <h1>{{ title }}</h1>
         {% endif %}
-        <h2>{{ queues[queue] }}</h2>
+        {% if queues[queue] is defined %}
+            <h2>{{ queues[queue] }}</h2>
+        {%  else %}
+            <h2><i>Unknown queue: {{ queue }}</h2>
+        {% endif %}
         <table class="table">
             <thead>
             <tr>

From 9fe8ea13a7ac0599f8836d312221d4b478c96ccf Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 27 Sep 2025 00:53:44 +0200
Subject: [PATCH 04/26] Use our own markdown_to_html convertor

Which stashes LaTeX during conversion and pops it afterwards.

Otherwise things like `\\` get replaced with `\` which failed with:
https://github.com/DOMjudge/domjudge/pull/3099#issuecomment-3293328981
---
 webapp/src/Twig/TwigExtension.php | 33 +++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/webapp/src/Twig/TwigExtension.php b/webapp/src/Twig/TwigExtension.php
index 60df1de6cc..7031e35617 100644
--- a/webapp/src/Twig/TwigExtension.php
+++ b/webapp/src/Twig/TwigExtension.php
@@ -37,6 +37,7 @@
 use Twig\Environment;
 use Twig\Extension\AbstractExtension;
 use Twig\Extension\GlobalsInterface;
+use Twig\Extra\Markdown\MarkdownRuntime;
 use Twig\Runtime\EscaperRuntime;
 use Twig\TwigFilter;
 use Twig\TwigFunction;
@@ -124,6 +125,7 @@ public function getFilters(): array
             new TwigFilter('medalType', $this->awards->medalType(...)),
             new TwigFilter('numTableActions', $this->numTableActions(...)),
             new TwigFilter('extensionToMime', $this->extensionToMime(...)),
+            new TwigFilter('domjudge_markdown_to_html', $this->domjudgeMarkdownToHTML(...), ['is_safe' => ['html']]),
         ];
     }
 
@@ -1406,4 +1408,35 @@ public function extensionToMime(string $extension): string
     {
         return DOMJudgeService::EXTENSION_TO_MIMETYPE[$extension];
     }
+
+    public function domjudgeMarkdownToHTML(string $markdown): string
+    {
+        $latexFound = [];
+        while(true) {
+            $start = strpos($markdown,'$$');
+            $end = strpos(substr($markdown, $start+2), '$$');
+            if ($start === false || $end === false) {
+                break;
+            }
+            $latexFound[] = substr($markdown, $start, $end+2+2);
+            $newMarkdown = substr($markdown, 0, $start);
+            $newMarkdown .= '$LaTeX$';
+            $newMarkdown .= substr($markdown, $end+$start+4);
+            $markdown = $newMarkdown;
+        }
+
+        /** @var MarkdownRuntime $runtime */
+        $runtime = $this->twig->getRuntime(MarkdownRuntime::class);
+        $markdown = (string)$runtime->convert($markdown);
+
+        $new = '';
+        foreach ($latexFound as $inlineLatex) {
+            $replacedStart = strpos($markdown,'$LaTeX$');
+            $new = substr($markdown, 0, $replacedStart);
+            $new .= $inlineLatex;
+            $new .= substr($markdown, $replacedStart+strlen('$LaTeX$'));
+            $markdown = $new;
+        }
+        return $markdown;
+    }
 }

From 4d9003841c5fbabe9fd8d21643a556aabe5b816c Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Tue, 28 Oct 2025 21:43:44 +0100
Subject: [PATCH 05/26] Get MathJax from yarn

---
 webapp/package.json | 4 +++-
 webapp/yarn.lock    | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/webapp/package.json b/webapp/package.json
index 18a1e415e5..8df1c65168 100644
--- a/webapp/package.json
+++ b/webapp/package.json
@@ -1,3 +1,5 @@
 {
-  "dependencies": {}
+  "dependencies": {
+    "mathjax": "^4.0.0"
+  }
 }
diff --git a/webapp/yarn.lock b/webapp/yarn.lock
index fb57ccd13a..801fe65e98 100644
--- a/webapp/yarn.lock
+++ b/webapp/yarn.lock
@@ -2,3 +2,7 @@
 # yarn lockfile v1
 
 
+"@mathjax/mathjax-newcm-font@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@mathjax/mathjax-newcm-font/-/mathjax-newcm-font-4.0.0.tgz#01afa8b20f2114665dc1d9a7fbc623a23ddb54e4"
+  integrity sha512-kpsJgIF4FpWiwIkFgOPmWwy5GXfL25spmJJNg27HQxPddmEL8Blx0jn2BuU/nlwjM/9SnYpEfDrWiAMgLPlB8Q==

From 7679030d1bc52084ad930bd111a93f8dadb0a6b3 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Thu, 30 Oct 2025 19:13:03 +0100
Subject: [PATCH 06/26] Render MathJax in clarifications

---
 webapp/public/js/domjudge.js                   |  1 +
 webapp/public/js/tex-chtml.js                  |  1 +
 webapp/public/mathjax                          |  1 +
 webapp/public/mathjaxfonts                     |  1 +
 .../AddContentSecurityPolicyListener.php       |  2 +-
 webapp/templates/base.html.twig                |  1 +
 webapp/templates/jury/export/layout.html.twig  |  1 +
 .../templates/partials/mathjaxhead.html.twig   | 18 ++++++++++++++++++
 .../partials/clarification_content.html.twig   |  4 ++++
 .../team/partials/clarification_list.html.twig |  5 ++++-
 webapp/yarn.lock                               |  7 +++++++
 11 files changed, 40 insertions(+), 2 deletions(-)
 create mode 120000 webapp/public/js/tex-chtml.js
 create mode 120000 webapp/public/mathjax
 create mode 120000 webapp/public/mathjaxfonts
 create mode 100644 webapp/templates/partials/mathjaxhead.html.twig

diff --git a/webapp/public/js/domjudge.js b/webapp/public/js/domjudge.js
index 371ae20e92..fdb21bb8be 100644
--- a/webapp/public/js/domjudge.js
+++ b/webapp/public/js/domjudge.js
@@ -939,6 +939,7 @@ function previewClarification($input, $previewDiv) {
             }
         }).done(function (data) {
             $previewDiv.html(data.html);
+            MathJax.typesetPromise([document.getElementById($previewDiv[0].id)]);
         });
     }
 }
diff --git a/webapp/public/js/tex-chtml.js b/webapp/public/js/tex-chtml.js
new file mode 120000
index 0000000000..47467ad03c
--- /dev/null
+++ b/webapp/public/js/tex-chtml.js
@@ -0,0 +1 @@
+../../node_modules/mathjax/tex-chtml.js
\ No newline at end of file
diff --git a/webapp/public/mathjax b/webapp/public/mathjax
new file mode 120000
index 0000000000..3a045cb444
--- /dev/null
+++ b/webapp/public/mathjax
@@ -0,0 +1 @@
+../node_modules/mathjax
\ No newline at end of file
diff --git a/webapp/public/mathjaxfonts b/webapp/public/mathjaxfonts
new file mode 120000
index 0000000000..89fd736689
--- /dev/null
+++ b/webapp/public/mathjaxfonts
@@ -0,0 +1 @@
+../node_modules/@mathjax/mathjax-newcm-font/chtml/woff2
\ No newline at end of file
diff --git a/webapp/src/EventListener/AddContentSecurityPolicyListener.php b/webapp/src/EventListener/AddContentSecurityPolicyListener.php
index d244aa0796..7b04339aaa 100644
--- a/webapp/src/EventListener/AddContentSecurityPolicyListener.php
+++ b/webapp/src/EventListener/AddContentSecurityPolicyListener.php
@@ -17,7 +17,7 @@ public function __invoke(ResponseEvent $event): void
         // the profiler requires 'unsafe-eval' for script-src 'self'.
         $response = $event->getResponse();
         $cspExtra = $this->profiler ? "'unsafe-eval'" : "";
-        $csp = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:";
+        $csp = "font-src 'self' data:; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:";
         $response->headers->set('Content-Security-Policy', $csp);
     }
 }
diff --git a/webapp/templates/base.html.twig b/webapp/templates/base.html.twig
index e953356b67..ecf48113bc 100644
--- a/webapp/templates/base.html.twig
+++ b/webapp/templates/base.html.twig
@@ -13,6 +13,7 @@
     <script src="{{ asset("js/jquery.min.js") }}"></script>
     <script src="{{ asset("js/jquery.debounce.min.js") }}"></script>
     <script src="{{ asset("js/bootstrap.bundle.min.js") }}"></script>
+    {% include 'partials/mathjaxhead.html.twig' %}
 
     <script src="{{ asset("js/domjudge.js") }}"></script>
     {% for file in customAssetFiles('js') %}
diff --git a/webapp/templates/jury/export/layout.html.twig b/webapp/templates/jury/export/layout.html.twig
index 4e465a2aab..39d6ae36a3 100644
--- a/webapp/templates/jury/export/layout.html.twig
+++ b/webapp/templates/jury/export/layout.html.twig
@@ -108,6 +108,7 @@
             color: darkgrey;
         }
     </style>
+    {% include 'partials/mathjaxhead.html.twig' %}
 </head>
 <body>
 <main role="main" class="">
diff --git a/webapp/templates/partials/mathjaxhead.html.twig b/webapp/templates/partials/mathjaxhead.html.twig
new file mode 100644
index 0000000000..9fc2607c12
--- /dev/null
+++ b/webapp/templates/partials/mathjaxhead.html.twig
@@ -0,0 +1,18 @@
+<script>
+    window.MathJax = {
+        tex: {
+            inlineMath: [['$', '$'], ['\\(', '\\)']]
+        },
+        chtml: {
+            fontURL: "{{ app.request.basePath }}/mathjaxfonts",
+            scale: 1.0
+        },
+        loader: {
+            paths: {
+                mathjax: "{{ app.request.basePath }}/mathjax"
+            },
+            load: ['input/tex', 'output/chtml']
+        }
+    };
+</script>
+<script src="{{ app.request.basePath }}/mathjax/tex-chtml.js"></script>
diff --git a/webapp/templates/team/partials/clarification_content.html.twig b/webapp/templates/team/partials/clarification_content.html.twig
index 7e38c1e53c..a3d2e03e52 100644
--- a/webapp/templates/team/partials/clarification_content.html.twig
+++ b/webapp/templates/team/partials/clarification_content.html.twig
@@ -24,3 +24,7 @@
         {{ form_end(form) }}
     </div>
 </div>
+
+<script>
+    MathJax.typeset([document.getElementsByClassName('card-body')]);
+</script>
diff --git a/webapp/templates/team/partials/clarification_list.html.twig b/webapp/templates/team/partials/clarification_list.html.twig
index daa60a8b53..f43303e00e 100644
--- a/webapp/templates/team/partials/clarification_list.html.twig
+++ b/webapp/templates/team/partials/clarification_list.html.twig
@@ -62,10 +62,13 @@
                     </td>
                 {% endif %}
 
-                <td>
+                <td class="clarification-text">
                     <a data-ajax-modal data-ajax-modal-after="markSeen" href="{{ link }}">
                         {{ clarification.summary | markdown_to_html | sanitize_html('app.clarification_sanitizer') }}
                     </a>
+                    <script>
+                        MathJax.typeset([document.getElementsByClassName('card-body')]);
+                    </script>
                 </td>
             </tr>
         {%- endfor %}
diff --git a/webapp/yarn.lock b/webapp/yarn.lock
index 801fe65e98..583eeb89e0 100644
--- a/webapp/yarn.lock
+++ b/webapp/yarn.lock
@@ -6,3 +6,10 @@
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/@mathjax/mathjax-newcm-font/-/mathjax-newcm-font-4.0.0.tgz#01afa8b20f2114665dc1d9a7fbc623a23ddb54e4"
   integrity sha512-kpsJgIF4FpWiwIkFgOPmWwy5GXfL25spmJJNg27HQxPddmEL8Blx0jn2BuU/nlwjM/9SnYpEfDrWiAMgLPlB8Q==
+
+mathjax@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/mathjax/-/mathjax-4.0.0.tgz#ff7aa8b6bfdc7e97e41091a9ed6d8c8f8eefd2a0"
+  integrity sha512-ThMPHiPl9ibZBInAmfoTCNq9MgCdH7ChIQ9YhKFc325noJ4DMzy9/Q14qdcuPzVJjEmC3kyXhwnERZWX3hbWzQ==
+  dependencies:
+    "@mathjax/mathjax-newcm-font" "^4.0.0"

From 962a3502ecb7947cf96b6654896051db988e68ff Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sun, 26 Oct 2025 22:50:07 +0100
Subject: [PATCH 07/26] Handle the case with missing file for symlink

---
 webapp/src/Service/DOMJudgeService.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/webapp/src/Service/DOMJudgeService.php b/webapp/src/Service/DOMJudgeService.php
index 2eb8f99fc0..6908b649cc 100644
--- a/webapp/src/Service/DOMJudgeService.php
+++ b/webapp/src/Service/DOMJudgeService.php
@@ -1568,6 +1568,9 @@ public function getScoreboardZip(
         $publicPath = realpath(sprintf('%s/public/', $this->projectDir));
         foreach ($assetMatches[1] as $file) {
             $filepath = realpath($publicPath . '/' . $file);
+            if ($filepath === false) {
+                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file);
+            }
             if (!str_starts_with($filepath, $publicPath) &&
                 !str_starts_with($filepath, $this->vendorDir)
             ) {

From d7ca092e5344de8ff7eb691af4cd0a30e44ad044 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 11:00:29 +0100
Subject: [PATCH 08/26] mathjaxfonts symlink seems to fail

---
 .github/jobs/baseinstall.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 40d1ab2103..1feaee7c96 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -32,6 +32,8 @@ section_start "Install JS frontend dependencies"
 cd webapp
 apt-get update; apt-get install -y yarnpkg
 yarnpkg install
+ls -atrl node_modules
+ls -atrl public
 cd ..
 section_end
 

From 70a54ddad4445e7459834c02166f5834cafd0d52 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 11:24:38 +0100
Subject: [PATCH 09/26] Where does it fial

---
 webapp/src/Service/DOMJudgeService.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/Service/DOMJudgeService.php b/webapp/src/Service/DOMJudgeService.php
index 6908b649cc..5c002a424b 100644
--- a/webapp/src/Service/DOMJudgeService.php
+++ b/webapp/src/Service/DOMJudgeService.php
@@ -1569,7 +1569,7 @@ public function getScoreboardZip(
         foreach ($assetMatches[1] as $file) {
             $filepath = realpath($publicPath . '/' . $file);
             if ($filepath === false) {
-                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file);
+                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file . "with filepath: " . $filepath . " and " . $$publicPath);
             }
             if (!str_starts_with($filepath, $publicPath) &&
                 !str_starts_with($filepath, $this->vendorDir)

From 8c66ba3c2ff6d90bbd8343d798e7b9a56d097dbe Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 12:14:06 +0100
Subject: [PATCH 10/26] Show the right error

---
 .github/jobs/baseinstall.sh            | 1 +
 webapp/src/Service/DOMJudgeService.php | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 1feaee7c96..b57ad0eef7 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -34,6 +34,7 @@ apt-get update; apt-get install -y yarnpkg
 yarnpkg install
 ls -atrl node_modules
 ls -atrl public
+ls -atrl public/mathjaxfonts
 cd ..
 section_end
 
diff --git a/webapp/src/Service/DOMJudgeService.php b/webapp/src/Service/DOMJudgeService.php
index 5c002a424b..54fb1633a0 100644
--- a/webapp/src/Service/DOMJudgeService.php
+++ b/webapp/src/Service/DOMJudgeService.php
@@ -1569,7 +1569,7 @@ public function getScoreboardZip(
         foreach ($assetMatches[1] as $file) {
             $filepath = realpath($publicPath . '/' . $file);
             if ($filepath === false) {
-                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file . "with filepath: " . $filepath . " and " . $$publicPath);
+                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file . " and " . $publicPath);
             }
             if (!str_starts_with($filepath, $publicPath) &&
                 !str_starts_with($filepath, $this->vendorDir)

From 6361298a11c2da7a7f92f74eae91587c7baafc44 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 12:14:59 +0100
Subject: [PATCH 11/26] Try to fail in CI again

---
 webapp/src/Service/DOMJudgeService.php | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/webapp/src/Service/DOMJudgeService.php b/webapp/src/Service/DOMJudgeService.php
index 54fb1633a0..5e028ba228 100644
--- a/webapp/src/Service/DOMJudgeService.php
+++ b/webapp/src/Service/DOMJudgeService.php
@@ -43,6 +43,7 @@
 use InvalidArgumentException;
 use Psr\Log\LoggerInterface;
 use ReflectionClass;
+use ReflectionException;
 use Symfony\Component\Cache\Adapter\FilesystemAdapter;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
 use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
@@ -67,6 +68,9 @@
 use Symfony\Component\Security\Core\User\UserInterface;
 use Symfony\Contracts\Cache\ItemInterface;
 use Twig\Environment;
+use Twig\Error\LoaderError;
+use Twig\Error\RuntimeError;
+use Twig\Error\SyntaxError;
 use ZipArchive;
 
 class DOMJudgeService
@@ -1512,6 +1516,12 @@ public function getCompileConfig(Submission $submission): string
         );
     }
 
+    /**
+     * @throws SyntaxError
+     * @throws ReflectionException
+     * @throws RuntimeError
+     * @throws LoaderError
+     */
     public function getScoreboardZip(
         Request $request,
         RequestStack $requestStack,
@@ -1569,7 +1579,7 @@ public function getScoreboardZip(
         foreach ($assetMatches[1] as $file) {
             $filepath = realpath($publicPath . '/' . $file);
             if ($filepath === false) {
-                throw new BadRequestHttpException("Could not find (symlinked) file: " . $file . " and " . $publicPath);
+                throw new Exception("Could not find (symlinked) file: " . $file . " and " . $publicPath);
             }
             if (!str_starts_with($filepath, $publicPath) &&
                 !str_starts_with($filepath, $this->vendorDir)

From 40cd21ccf788c1c39ea57d68f8fa6eddf084fc27 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 12:29:40 +0100
Subject: [PATCH 12/26] Let more people use Fedora for development

---
 doc/manual/develop.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/develop.rst b/doc/manual/develop.rst
index f7c7471990..7ba7483ce0 100644
--- a/doc/manual/develop.rst
+++ b/doc/manual/develop.rst
@@ -46,7 +46,7 @@ already listed under
 For Fedora use::
 
   sudo dnf install git autoconf automake bats \
-    sphinx-build python3-sphinx_rtd_theme latexmk texlive-cmap \
+    sphinx-build python3-sphinx_rtd_theme latexmk yarnpkg texlive-cmap \
     texlive-metafont texlive-tex-gyre texlive-fncychap texlive-wrapfig \
     texlive-capt-of texlive-framed texlive-upquote texlive-needspace \
     texlive-tabulary texlive-parskip texlive-oberdiek texlive-makeindex \

From fedd005fef0fbfc72a8d36c1029228da4180fe1d Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 16:19:22 +0100
Subject: [PATCH 13/26] Debug further

---
 .github/jobs/baseinstall.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index b57ad0eef7..45c441021d 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -35,6 +35,8 @@ yarnpkg install
 ls -atrl node_modules
 ls -atrl public
 ls -atrl public/mathjaxfonts
+ls -atrl public/mathjaxfonts/*
+ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2
 cd ..
 section_end
 

From 33607b0732d87b726ca4510c9f6b8298daa30437 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 23:31:03 +0100
Subject: [PATCH 14/26] Update webapp/templates/jury/clarification.html.twig

---
 webapp/templates/jury/clarification.html.twig | 2 --
 1 file changed, 2 deletions(-)

diff --git a/webapp/templates/jury/clarification.html.twig b/webapp/templates/jury/clarification.html.twig
index b04d3ab454..28b7fabb79 100644
--- a/webapp/templates/jury/clarification.html.twig
+++ b/webapp/templates/jury/clarification.html.twig
@@ -18,8 +18,6 @@
             </div>
         {% endif %}
 
-
-
         {% for clar in list %}
             <div style="height: 100px;"></div>
             <div>Pure body:<br>{{ clar.body }}</div>

From a35cf130723c0b23ea29a6cae6a38e56f6ae2974 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 23:31:11 +0100
Subject: [PATCH 15/26] Update webapp/src/Twig/TwigExtension.php

---
 webapp/src/Twig/TwigExtension.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/Twig/TwigExtension.php b/webapp/src/Twig/TwigExtension.php
index 7031e35617..9bffb85202 100644
--- a/webapp/src/Twig/TwigExtension.php
+++ b/webapp/src/Twig/TwigExtension.php
@@ -1412,7 +1412,7 @@ public function extensionToMime(string $extension): string
     public function domjudgeMarkdownToHTML(string $markdown): string
     {
         $latexFound = [];
-        while(true) {
+        while (true) {
             $start = strpos($markdown,'$$');
             $end = strpos(substr($markdown, $start+2), '$$');
             if ($start === false || $end === false) {

From 3e72b944cd61bcc47ad812cd86790c4ba6c81c9d Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 23:31:21 +0100
Subject: [PATCH 16/26] Update webapp/src/Twig/TwigExtension.php

---
 webapp/src/Twig/TwigExtension.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/Twig/TwigExtension.php b/webapp/src/Twig/TwigExtension.php
index 9bffb85202..a3e319e658 100644
--- a/webapp/src/Twig/TwigExtension.php
+++ b/webapp/src/Twig/TwigExtension.php
@@ -1413,7 +1413,7 @@ public function domjudgeMarkdownToHTML(string $markdown): string
     {
         $latexFound = [];
         while (true) {
-            $start = strpos($markdown,'$$');
+            $start = strpos($markdown, '$$');
             $end = strpos(substr($markdown, $start+2), '$$');
             if ($start === false || $end === false) {
                 break;

From 0921a0410a91a115e6131c4605dd2c8d103b6c8b Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 23:31:30 +0100
Subject: [PATCH 17/26] Update webapp/src/Twig/TwigExtension.php

---
 webapp/src/Twig/TwigExtension.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/Twig/TwigExtension.php b/webapp/src/Twig/TwigExtension.php
index a3e319e658..bb71508235 100644
--- a/webapp/src/Twig/TwigExtension.php
+++ b/webapp/src/Twig/TwigExtension.php
@@ -1431,7 +1431,7 @@ public function domjudgeMarkdownToHTML(string $markdown): string
 
         $new = '';
         foreach ($latexFound as $inlineLatex) {
-            $replacedStart = strpos($markdown,'$LaTeX$');
+            $replacedStart = strpos($markdown, '$LaTeX$');
             $new = substr($markdown, 0, $replacedStart);
             $new .= $inlineLatex;
             $new .= substr($markdown, $replacedStart+strlen('$LaTeX$'));

From d0365570cc726517feefd2c15896a99b5a119d6d Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Fri, 31 Oct 2025 23:48:11 +0100
Subject: [PATCH 18/26] Add realpath checks for public directories

Add realpath commands to check public paths
---
 .github/jobs/baseinstall.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 45c441021d..5fa4938af0 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -37,6 +37,8 @@ ls -atrl public
 ls -atrl public/mathjaxfonts
 ls -atrl public/mathjaxfonts/*
 ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2
+realpath /opt/domjudge/domserver/webapp/public
+realpath /opt/domjudge/domserver/webapp/public/mathjaxfonts
 cd ..
 section_end
 

From cf52598ffff1d57a0f745372139ca7b473f77588 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 07:29:12 +0100
Subject: [PATCH 19/26] Add pwd command for debugging in baseinstall.sh

Added debugging output to baseinstall.sh.
---
 .github/jobs/baseinstall.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 5fa4938af0..029a2bf265 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -37,6 +37,8 @@ ls -atrl public
 ls -atrl public/mathjaxfonts
 ls -atrl public/mathjaxfonts/*
 ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2
+pwd
+# The problem might be that we don't install the mathjaxfonts directory in the make domserver step.
 realpath /opt/domjudge/domserver/webapp/public
 realpath /opt/domjudge/domserver/webapp/public/mathjaxfonts
 cd ..

From 8291d7385bcf03284cc1c51ebce27ff3927223b3 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 07:48:56 +0100
Subject: [PATCH 20/26] Enhance debugging for JS frontend dependencies

Added debug sections for JS frontend dependencies and adjusted commands for better clarity.
---
 .github/jobs/baseinstall.sh | 20 +++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 029a2bf265..8aac4b3dbc 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -32,16 +32,15 @@ section_start "Install JS frontend dependencies"
 cd webapp
 apt-get update; apt-get install -y yarnpkg
 yarnpkg install
+cd ..
+section_end
+
+section_start "Debug JS frontend dependencies"
+pwd
 ls -atrl node_modules
-ls -atrl public
-ls -atrl public/mathjaxfonts
 ls -atrl public/mathjaxfonts/*
 ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2
-pwd
-# The problem might be that we don't install the mathjaxfonts directory in the make domserver step.
-realpath /opt/domjudge/domserver/webapp/public
-realpath /opt/domjudge/domserver/webapp/public/mathjaxfonts
-cd ..
+realpath public/mathjaxfonts
 section_end
 
 section_start "Set simple admin password"
@@ -74,6 +73,13 @@ else
 fi
 section_end
 
+section_start "Debug JS frontend dependencies"
+# The problem might be that we don't install the mathjaxfonts directory in the make domserver step.
+realpath /opt/domjudge/domserver/webapp/public
+ls -atrl /opt/domjudge/domserver/webapp/public
+realpath /opt/domjudge/domserver/webapp/public/mathjaxfonts
+section_end
+
 section_start "SQL settings"
 cat > ~/.my.cnf <<EOF
 [client]

From 10433e1e95598f451c7cad09715cca73ee72ba47 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 09:16:39 +0100
Subject: [PATCH 21/26] Update Makefile

---
 webapp/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/Makefile b/webapp/Makefile
index 4578e6c1da..48c85ae7c7 100644
--- a/webapp/Makefile
+++ b/webapp/Makefile
@@ -65,7 +65,7 @@ install-domserver:
 # This must be done first to install with the rest.
 	$(MAKE) copy-bundle-assets
 	$(INSTALL_DIR) $(DESTDIR)$(domserver_webappdir);
-	for d in bin config migrations public resources src templates tests vendor; do \
+	for d in bin config migrations public resources src templates tests vendor node_modules; do \
 		$(call install_tree,$(DESTDIR)$(domserver_webappdir),$$d) ; \
 	done
 # Add Symlink to Symfony console that is in the standard path

From 6232e6ed50f451746cd7e7e7286a72f715c7f22a Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 10:09:19 +0100
Subject: [PATCH 22/26] Update baseinstall.sh

---
 .github/jobs/baseinstall.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 8aac4b3dbc..98a728d3cc 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -37,6 +37,7 @@ section_end
 
 section_start "Debug JS frontend dependencies"
 pwd
+cd webapp
 ls -atrl node_modules
 ls -atrl public/mathjaxfonts/*
 ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2

From df7675002ebafc23230f1ab164672bbf299b2634 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 10:16:23 +0100
Subject: [PATCH 23/26] Update baseinstall.sh

---
 .github/jobs/baseinstall.sh | 16 ----------------
 1 file changed, 16 deletions(-)

diff --git a/.github/jobs/baseinstall.sh b/.github/jobs/baseinstall.sh
index 98a728d3cc..40d1ab2103 100755
--- a/.github/jobs/baseinstall.sh
+++ b/.github/jobs/baseinstall.sh
@@ -35,15 +35,6 @@ yarnpkg install
 cd ..
 section_end
 
-section_start "Debug JS frontend dependencies"
-pwd
-cd webapp
-ls -atrl node_modules
-ls -atrl public/mathjaxfonts/*
-ls -atrl public/mathjaxfonts/mjx-ncm-zero.woff2
-realpath public/mathjaxfonts
-section_end
-
 section_start "Set simple admin password"
 echo "password" > ./etc/initial_admin_password.secret
 echo "default login admin password password" > ~/.netrc
@@ -74,13 +65,6 @@ else
 fi
 section_end
 
-section_start "Debug JS frontend dependencies"
-# The problem might be that we don't install the mathjaxfonts directory in the make domserver step.
-realpath /opt/domjudge/domserver/webapp/public
-ls -atrl /opt/domjudge/domserver/webapp/public
-realpath /opt/domjudge/domserver/webapp/public/mathjaxfonts
-section_end
-
 section_start "SQL settings"
 cat > ~/.my.cnf <<EOF
 [client]

From f9b2e2f80b987539f489bba3490608a65344d6a9 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 10:21:18 +0100
Subject: [PATCH 24/26] Update codeql-analysis.yml

---
 .github/workflows/codeql-analysis.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 77a7a5852c..4eba3feb01 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -36,6 +36,12 @@ jobs:
       with:
         languages: ${{ matrix.language }}
 
+    - name: Install yarn files
+      if: ${{ contains(env.COMPILED, matrix.language) }}
+      run: |
+        cd webapp
+        yarnpkg install
+
     - name: Install composer files
       if: ${{ contains(env.COMPILED, matrix.language) }}
       run: |

From a25851d78e8a109c11b6cf1ceafe9598a050aaab Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 10:24:37 +0100
Subject: [PATCH 25/26] Update codeql-analysis.yml

---
 .github/workflows/codeql-analysis.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4eba3feb01..5fc1b22259 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -40,6 +40,7 @@ jobs:
       if: ${{ contains(env.COMPILED, matrix.language) }}
       run: |
         cd webapp
+        apt-get update; apt-get install yarnpkg -y
         yarnpkg install
 
     - name: Install composer files

From 4cc91330870f3e79ec9ac2bb93791dd324cc2136 Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 1 Nov 2025 10:35:37 +0100
Subject: [PATCH 26/26] Update codeql-analysis.yml

---
 .github/workflows/codeql-analysis.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 5fc1b22259..754b3f0ea2 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -40,8 +40,8 @@ jobs:
       if: ${{ contains(env.COMPILED, matrix.language) }}
       run: |
         cd webapp
-        apt-get update; apt-get install yarnpkg -y
-        yarnpkg install
+        sudo apt-get update; sudo apt-get install yarnpkg -y
+        sudo yarnpkg install
 
     - name: Install composer files
       if: ${{ contains(env.COMPILED, matrix.language) }}