Wednesday, 8 May 2019

SCORM Hosting Cross-Origin

I try to host a SCORM e-learning module decentralized on an other domain than my LMS (Learning Management System) is running. SCORM Modules are normally running in their own browser frame/window and communicating with the LMS directly, running all on the same domain. This is no problem because there is no security issue. Already tried this case with my code and it worked.

To archive the module is hosted on an other server I try to use something like a wrapper. These wrapper is hosted on the LMS, load the content from extern and communicates via postMessage with the LMS. I tried this open-source project: https://github.com/Didask/scol-r

But i don't get it work. Everytime i end up with the error: Error grabbing 1.2 API-SecurityError:Blocked a frame with origin "https://..." from accessing a cross-origin frame. Protocols, domains, and ports must match. So something try to access something that is not allowed. The exception is raised in the "SCORM_ScanParentsForApi" method.

I already ask the author of the project but he had no answer at all. I set up a small demo project in react to simulate an LMS. Added the wrapper module that point to my external content server where the SCORM module is hosted. https://sosafe.de/lms/ There you can see the problem and debug.

Maybe someone have an idea or can give my a hint. I think it is something trivial. Hopefully ;) Thanks!

Test Project: http://sosafe.de/test_project.zip



from SCORM Hosting Cross-Origin

No comments:

Post a Comment