[OPEN] In Safari browser, iframed HTML files uploaded to course files do not display due to missing session cookie

Canvas

Engineers are currently investigating the issue.

Description

When an HTML file is uploaded to Canvas course files and embedded via an iframe, the file does not display for users in the iOS Student and Teacher apps. The issue occurs because the HTML file is served from a canvas-user-content domain, and the canvas_session cookie is not passed in the request, preventing access to the file.

Expected Behavior

Students and Teachers using the iOS apps should be able to view HTML files embedded via iframes in Canvas course content, as long as they have proper access to the course files.

Workaround

No workaround exists at this time.

Steps to Reproduce

Prerequisites: A course with a student and teacher enrolled.

  1. Upload an HTML file to the course files in Canvas.
  2. Embed the HTML file in a page using an iframe with the src set to the file’s URL (/courses/:course_id/files/:file_id/download path).
  3. Open the page in the Canvas Student and Teacher apps on iOS while logged in as the respective user.
  4. Observe that the embedded content does not load due to missing authentication.

Additional Info

RCX-3129

This issue was previously reported for HTML files in quizzes under LX-730. The problem now appears to extend beyond quizzes to other content types.


Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.

Labels (1)
Tags (1)