-
Notifications
You must be signed in to change notification settings - Fork 17
CORS policy is blocking external video on course #207
Copy link
Copy link
Open
Labels
🐛bugSomething isn't workingSomething isn't workingP3 - NormalMay be fixed after the release / in the next release. This is the priority set as default.May be fixed after the release / in the next release. This is the priority set as default.S1 - Major Defects 🔥Failure of entire or part of system, but there are some processing alternativesFailure of entire or part of system, but there are some processing alternativesenv:next releaseSomething isn't working on next releaseSomething isn't working on next releasemodule:coursepassed 🔵The implementation meets the requirementThe implementation meets the requirementresolution:
workaroundthis bug has a bypassthis bug has a bypassrole:Studentuser's roleuser's roletype:securityAllows for code execution from remote site, CORS boundaries, unchecked array bounds, etcAllows for code execution from remote site, CORS boundaries, unchecked array bounds, etc
Milestone
Metadata
Metadata
Assignees
Labels
🐛bugSomething isn't workingSomething isn't workingP3 - NormalMay be fixed after the release / in the next release. This is the priority set as default.May be fixed after the release / in the next release. This is the priority set as default.S1 - Major Defects 🔥Failure of entire or part of system, but there are some processing alternativesFailure of entire or part of system, but there are some processing alternativesenv:next releaseSomething isn't working on next releaseSomething isn't working on next releasemodule:coursepassed 🔵The implementation meets the requirementThe implementation meets the requirementresolution:
workaroundthis bug has a bypassthis bug has a bypassrole:Studentuser's roleuser's roletype:securityAllows for code execution from remote site, CORS boundaries, unchecked array bounds, etcAllows for code execution from remote site, CORS boundaries, unchecked array bounds, etc
Expected Behavior
External video included by teacher - passed play validation -, must be presented to student as well

Current Behavior
Steps to Reproduce
Video 1: not blocked by CORS policy
Video 2: blocked by CORS policy
Access to video at 'https://ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4' from origin 'https://vm2161.kaj.pouta.csc.fi' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4:1 GET https://ia800209.us.archive.org/20/items/ElephantsDream/ed_1024_512kb.mp4 net::ERR_FAILEDEnvironment
https://vm2161.kaj.pouta.csc.fi/
Possible Solution or Implementation
Bad value for
crossoriginattribute, check allowed values and check VideoJs Docs on how to setcrossoriginattributeAlso, check CORS type of errors
Related issues
#135 (comment)
Workaround
Teacher need to download the video and them upload it in SELI