It looks like Display Name is the only one available in the ENV variable
Hi Matthew Moore
No executable scripting is permitted in Canvas pages or anywhere else with an RCE. This is done for security reasons..
I am sure others will provide you with a much longer and more detailed answer, but that is the bottom line.
Retrieving data ...