Canvas video player security issue

0 Likes

When a user goes through the HTML code of the page, the user can be able to copy the MP4 video link and download the video even though the videos were not set up to be download. 

The user can also share this link with another Non-Canvas user, and the non-canvas user will be able to view, download the video that is private to that particular organization. 

We think this is a security breach issue for all the Canvas users. 

 

 

Tags (2)
2 Comments
Stef_retired
Instructure Alumni
Instructure Alumni
Status changed to: Moderating

@ErfanZayer 

Thanks for sharing this information. Would you please use the support pathway provided by your institution to send this in a ticket to Canvas Support? General instructions are in How do I get help with Canvas as an instructor?  Our support team will evaluate this from a security standpoint.

Stef_retired
Instructure Alumni
Instructure Alumni
Status changed to: Archived