[OPEN] Security Policy doesn't include https://cdn.inst-fs-iad-prod.inscloudgate.net


Engineers are currently investigating the issue.


Expected Behavior


No workaround exists at this time.

Steps to Reproduce

Prerequisites: A Canvas instance with the Canvas Content Security Policy enabled

  1. In a Canvas course, create a Classic Quiz with a file upload option.

  2. As a student, take the quiz and upload a file to the question.

  3. Go to the submission in Speed Grader and click the file name to try downloading it, notice the error that it's not supported by the policy in place.

  4. In the account, turn off the Content Security Policy and notice that you can click the submission and it downloads without error.

Additional Info


Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.

Labels (1)
Tags (1)