Sean Hammond

"The following content is partner provided" when trying to use keyboard

5

 1. Go to the [SCRATCH ASSIGNMENT](https://hypothesis.instructure.com/courses/125/assignments/1069) 2. Click Edit assignment settings 3. Click Find under **Enter or find an external tool URL** and select one of the...

"Save" button on admin pages turns all `None` settings to `False`

2

When you view an application instance on the admin pages (e.g. http://localhost:8001/admin/instance/Hypothesis14af0fe87c9deb2e461f88be4a8d5364/) it may have some settings missing from its `application_instances.settings` column, for example: ``` {"blackboard": {"files_enabled": true, "groups_enabled": true}}...

Better differentiate instructor email digests from marketing emails

1

We're concerned that users may not notice the distinction between marketing emails sent by Hypothesis and the "instructor email digests" that the LMS app sends to notify instructors of student...

The `LMS_SECRET` envvar is used for two things: 1. [It's the value of the `"lms_secret"` setting](https://github.com/hypothesis/lms/blob/df063702e2e9851e97b1a5ce94d1bd8c8de8debf/lms/config/__init__.py#L34) 2. [The first 16 chars of the `LMS_SECRET` envvar also double as the value...

Test scripts shouldn't be exposed in production

2

https://lms.hypothes.is/static/scripts/bootstrap.js https://lms.hypothes.is/static/scripts/karma.config.js https://lms.hypothes.is/static/scripts/file_picker/store-test.js etc

[You should redirect after receiving a `POST`](https://en.wikipedia.org/wiki/Post/Redirect/Get) and this is [just as true when the `POST` is an LTI launch](https://www.imsglobal.org/wiki/step-5-redirect-user) but the app doesn't do this. All of the LTI...

Although it "works" the behaviour of the content item selection form is a little wonky. For example in the case of an LMS that doesn't support content item selection, so...

When responding to an LTI launch our backend code renders an authentication JWT into the HTML that the page's frontend code can use to authenticate itself as the LTI user...

Ideal Canvas SpeedGrader experience

2

[MVP Canvas SpeedGrader Support #658](https://github.com/hypothesis/lms/issues/658) describes the minimal SpeedGrader experience that we'll ship first. _This_ card goes beyond that and describes the ideal SpeedGrader experience that we could move towards...

When an instructor creates a YouTube assignment in the LMS app the frontend will in future be able to show the user a list of the video's available transcripts and...