[OPEN] html documents with embedded javascript won't render when clicked from a link in RCE content

Canvas

Engineers are currently investigating the issue.

Description

html files that include any form of javascript get cross site scripting errors when attempting to load by clicking on a link to them within a page to open an embedded preview.

  • Opening it in a new tab works fine.

Expected Behavior

For the file to render properly as it used to in the past prior to the new file preview functionality that opens inline after clicking a link to a file.

  • Further more these types of document still load correctly while iframed directly on their files page so this is exclusively an issue with how the iframe is being created when the file preview opens from RCE content links.

Workaround

If you open link in a new window the document loads correctly.

Steps to Reproduce

  1. Create course

  2. Upload an html file to the files area of a course which includes any javascript within it.

  3. Create a page in the course and link to that file

  4. Attempt to open the file by clicking the link.

    1. Page will not properly load. either letting you know to enable javascript or by failing to load completely.

  5. Right click the link to the file and open in new tab

    1. The html file will load correctly here.

Additional Info

RCX-2844

Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.

Labels (1)
Tags (1)