Test plan:
- comment out the event.origin check I added in LTI2Iframe.js & compile
assets
- run the repro steps detailed in the ticket.
- it should not repro, as the HTML should be escaped.
- uncomment the event.origin check & recompile assets
- run the repro steps again. Now, it shouldn't even show a flashError.
- make sure LTI 2 registration still works (?)
refs INTEROP-6755
Change-Id: I0df2b92cddf7e94befe51a3a0f117f3a03c40b6d
Reviewed-on: https://gerrit.instructure.com/c/canvas-lms/+/264361
Tested-by: Service Cloud Jenkins <svc.cloudjenkins@instructure.com>
Reviewed-by: Weston Dransfield <wdransfield@instructure.com>
QA-Review: Weston Dransfield <wdransfield@instructure.com>
Product-Review: Weston Dransfield <wdransfield@instructure.com>