• last updated 10 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
"An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing"

See e.g. https://cloud.google.com/blog/products/data-analytics/iframe-sandbox-tutorial

We set in xooauth/tcl/lti-procs.tcl a restrictive default (all sandboxing restrictions are applied by default). Users should relax it according to their embedded application.

xooauth/www/admin/lti-test.tcl is not really a productive file, so we set the already hardcoded value to no-sandboxing and note that this would be appropriate.

  1. … 1 more file in changeset.
Add documentation to public api

improve spelling

  1. … 42 more files in changeset.
don't hard-code "Learner" as role

Zoom LTI Interface: do not unset "lis_person_sourcedid" and "lis_person_contact_email_primary". The latter is not needed if a user should be logged in as "Student", but is required if the user should be logged in as "Instructor". "Instructor" in the Zoom context means, giving this person the permission to create/manage meetings in the context of the launch. Which roles are considered by Zoom as being an "Instructor" have to be specified in the settings of Zoom's "LTI Pro" application.

Added feature to auto lauch LTI login forms upon page loading. This is especially useful when embedding LTI content using an iframe.

added KTI 1.1 properties

added OAuth based LTI integration and launch buttons

For details, see https://openacs.org/xowiki/accessing-lti-services

  1. … 3 more files in changeset.