![]() Test plan: - comment out the event.origin check I added in LTI2Iframe.js & compile assets - run the repro steps detailed in the ticket. - it should not repro, as the HTML should be escaped. - uncomment the event.origin check & recompile assets - run the repro steps again. Now, it shouldn't even show a flashError. - make sure LTI 2 registration still works (?) refs INTEROP-6755 Change-Id: I0df2b92cddf7e94befe51a3a0f117f3a03c40b6d Reviewed-on: https://gerrit.instructure.com/c/canvas-lms/+/264361 Tested-by: Service Cloud Jenkins <svc.cloudjenkins@instructure.com> Reviewed-by: Weston Dransfield <wdransfield@instructure.com> QA-Review: Weston Dransfield <wdransfield@instructure.com> Product-Review: Weston Dransfield <wdransfield@instructure.com> |
||
---|---|---|
.. | ||
jquery | ||
package.json |