Skip to content

CORS policy is blocking external video on course #207

@ecureuill

Description

@ecureuill

Expected Behavior

External video included by teacher - passed play validation -, must be presented to student as well
image

Current Behavior

image

Steps to Reproduce

Video 1: not blocked by CORS policy

Video 2: blocked by CORS policy

<video src="https://ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4" preload="auto" controls="" crossorigin="true" style="width: 100%; height: 100%;">
<track kind="subtitles" src="">
</video>
Access to video at 'https://ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4' from origin 'https://vm2161.kaj.pouta.csc.fi' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4:1 GET https://ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4 net::ERR_FAILED

Environment

https://vm2161.kaj.pouta.csc.fi/

Possible Solution or Implementation

Bad value for crossorigin attribute, check allowed values and check VideoJs Docs on how to set crossorigin attribute

Also, check CORS type of errors

Related issues

#135 (comment)

Workaround

Teacher need to download the video and them upload it in SELI

Metadata

Metadata

Assignees

Labels

🐛bugSomething isn't workingP3 - NormalMay be fixed after the release / in the next release. This is the priority set as default.S1 - Major Defects 🔥Failure of entire or part of system, but there are some processing alternativesenv:next releaseSomething isn't working on next releasemodule:coursepassed 🔵The implementation meets the requirementresolution: :trollface: workaroundthis bug has a bypassrole:Studentuser's roletype:securityAllows for code execution from remote site, CORS boundaries, unchecked array bounds, etc

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions