Content editor strips script and css file links (free for teacher version)

[michelwilliams]

Hello, 

We are testing the free-for-teacher Canvas platform version.

Our courses' content uses links to css and javascript files for styling and interactivity. Unfortunately, the content editor strips out every <link> and <style> tags as well.

Is this a security feature in the free-for-teacher version or does this happen in the "full" version of Canvas as well?

Thanks in advance for the feedback!

[mzimmerman]

Hi @michelwilliams 

There is a list of HTML tags which are allowed in the RCE at https://community.canvaslms.com/t5/Canvas-Resource-Documents/Canvas-HTML-Editor-Allowlist/ta-p/38706... 

[michelwilliams]

@mzimmerman, 

Thank you very much for the quick reply! 

In order to use css and javascript files, would a theme be the only option? The free-for-teacher version of Canvas does not let us test it.

In our case, we have content integrators who add content to courses.

• can themes be created by a user who is not a platform admin (ex. integrator)?
• can a theme be limited to a single course and not available to others?

If these questions are out of scope, please let me know and I'll create another post 🙂

[mzimmerman · Accepted solution]

Themes are set at the sub-account level, and can only be applied by administrators.

There are a few threads about ways to use CSS in individual courses, such as https://community.canvaslms.com/t5/Canvas-Instructional-Designer/Is-there-really-no-way-to-apply-a-s... , but I don't know if they are current enough to still work.

[chriscas]

Just to piggyback off of this...  As an admin for a higher-ed institution, I can say that we would very rarely approve/install theme (css or js) modifications for a vendor.  I would recommend looking at different approaches if at all possible. Either import more plain/vanilla html content, or redirect users to a 3rd party site where there are less restrictions on the allowed html.

My two cents...

-Chris