This issue was declined by the product team. Please see the Additional Info section for resolution information.
When a student attempts to take a classic quiz with an access code, the student is able to enter an unlimited amount of incorrect access codes. This can cause curious students in programming classes to brute force the access code.
Explore ways to prevent unlimited access code submissions.
No workaround exists at this time.
Create a classic quiz with an access code that is an integer (The customer’s example is four numbers).
As a student, take quiz.
On the screen with the access code input field, open dev tools.
Enter anything, and click submit.
Copy request as cURL.
Convert the cURL to Python (or any other language) using Postman.
Add the code to a loop, add an f-string for the access_code, set a range, and add a condition that checks the response (e.g. if "This quiz is restricted by an access code" not in response.text:).
Run the script.
Note that it eventually returns the correct access code.
QO-1282
Classic Quizzes is in maintenance mode. Significant updates are not planned as the product is being phased out.
For all high-stakes assessments, we recommend the following strategies:
Migrate to New Quizzes – New Quizzes includes modern protections, such as built-in throttling, to help prevent unauthorized access attempts.
Use Proctoring Tools – For maximum security, high-stakes exams should use external proctoring tools or a LockDown Browser. These tools help ensure students cannot access the system in ways that could compromise the exam.
Alternative for Low-Stakes Exams – For lower-stakes assessments, using longer, more complex access codes (alphanumeric rather than short numbers) can make unauthorized attempts much more difficult.
Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.
To interact with Panda Bot, our automated chatbot, you need to sign up or log in:
Sign in
