SafeExamBrowser

April 9, 2024

• Removed the Autofill Contacts/Passwords context menu item in text fields on iOS 17. • Also removed the "Share..." context menu item (which is anyways blocked by the AAC Assessment Mode). Note that the "Translate" context menu item cannot be removed currently (not covered by API, but also blocked by AAC). • Fixed wrong browser toolbar height in iPhone landscape mode on iOS 17 and after rotating an iPad with iPadOS 17. • Fixed Search text icon had a text field background color on iOS 16/17. • Display deprecation warning when classic WebView is used. • Added setting in Browser Features pane to disable deprecation warning when classic WebView is used. • Now using an alternative method to add the SEB User Agent string in HTTP Headers with classic WebView. This avoids compatibility issues when an assessment system with SEB integration doesn't yet support the modern WebView (doesn't use the SEB Javascript API to query ConfigKey/BrowserExamKey). This fix nevertheless is no reason to delay implementing support for the modern WebView in SEB integrations. Any iOS update may break support for the classic WebView (UIWebView) finally! • Added new setting in Browser Features pane to reload the full page after a connection error (instead of loading the failed URL). This is a workaround for some LMS/assessment system issues e.g. in Moodle. • Fixed: When using the optional SEB Server, locking the client didn't work. • Fixed crash when scaling already scaled dynamic font in lock and About SEB screens. • Fixed German localization in in-app-settings.

January 29, 2024

• Added option to share settings "for starting an exam" uncompressed as plain text. This is helpful for importing these configuration files into LMS/exam systems which don't support gzip compressed or encrypted config files (for example Moodle) or for manual editing. • Fixed: Cancel in Exam Password dialog didn't work. • Fixed keyboard shortcut for switching tabs (control-tab/shift-control-tab) didn't work on current iPadOS versions. • Fixed: Saving config files for MDM didn't use the .plist extension on iOS. • Fixed possible concurrency issue when downloading config in temporary WebView. • Fixed: Revert to Defaults doesn't remove outdated settings. • Fixed: Current BrowserExamKey/ConfigKey were sometimes not displayed in Settings together with the warning "Config was modified, keys won't match original state!" even when the current configuration wasn't changed. • Fixed: No error message was displayed when attempting to download/open SEB configurations while this was disabled. • Fixed SEB Server BrowserExamKey was not recognized by Moodle when classic WebView was used. • Added workaround for SEB Server bug to send BrowserExamKey (BEK) in HTTP headers when Server BEK is used, even if setting sendBrowserExamKey = false. • Remove the outdated setting allowWLAN (which causes problems when calculating the ConfigKey) when saving configurations. • Extended error message when the optional feature Zoom proctoring is enabled in settings with "Due to Zoom licensing issues, Zoom live proctoring is only available for SEB Alliance members. Please see https://safeexambrowser.org/alliance.". New in 3.3: • Accessibility improvements: Added dynamic type font scaling to side menu, Initial Configuration Assistant, About SEB and lock screen views. • Now also supporting Increase Contrast mode and Bold Text in side menu. • Improved VoiceOver feedback when opening new screens/views. • Now supporting QR codes containing full, compressed SEB configuration, for internal SEB QR code reader and for QR codes scanned with iOS Camera App. It's no longer necessary to store a config file on a server. • Now it's possible to generate and share QR codes containing full SEB configurations directly as PNG image files from the in-app settings menu. • Added support for config links (URLs) containing full SEB configurations (similar to the new QR codes). • New setting for removing default key/values from shared (exported) config files, which decreases size significantly (for example removing default prohibited processes). This is by default used for generated QR code and config link configurations and helpful for MDM configuration for example with Jamf. • Improved comparing settings from MDM server with current settings. • Now gzip compressing also unencrypted config files. • Added separate allow downloads/uploads settings (allowDownloads = default true, allowUploads = default true), using AND with existing, but deprecated setting allowDownUploads. • Added option to block uploads and file/photo selection dialog for "Choose File" button in modern WebView. • Now preventing that a web application can close the SEB main browser tab (the one containing the exam page). • Fixed web application couldn't close a classic WebView. • Now using ConfigKey to identify stored running exam session for lock screen. This should avoid unnecessary lock screens if a new exam is opened, which is using the same start URL as an older locked exam. Optional features which need to be individually configured and are disabled by default: • App Signature Key functionality, which allows automated application integrity checks similar to the manual use of the Browser Exam Key (no copy-paste of hash string necessary). • New server-driven Browser Exam Key which can be used for improved SEB Server integration with LMS/assessment systems like Moodle. • Now showing "Disconnecting" window when quitting SEB Server session, for user feedback in case of connection issues.

September 19, 2023

• Accessibility improvements: Added dynamic type font scaling to side menu, Initial Configuration Assistant, About SEB and lock screen views. • Now also supporting Increase Contrast mode and Bold Text in side menu. • Improved VoiceOver feedback when opening new screens/views. • Now supporting QR codes containing full, compressed SEB configuration, for internal SEB QR code reader and for QR codes scanned with iOS Camera App. It's no longer necessary to store a config file on a server. • Now it's possible to generate and share QR codes containing full SEB configurations directly as PNG image files from the in-app settings menu. • Added support for config links (URLs) containing full SEB configurations (similar to the new QR codes). • Added option to export SEB settings as an unencrypted plist file for the MDM Managed Configuration feature. • New setting for removing default key/values from shared (exported) config files, which decreases size significantly (for example removing default prohibited processes). This is by default used for generated QR code and config link configurations and helpful for MDM configuration for example with Jamf. • Improved comparing settings from MDM server with current settings by also correctly comparing single prohibited processes. • Now gzip compressing also unencrypted config files. Only MDM config files are saved uncompressed. • Changed title of Config Files settings page to Configurations and updated terminology. • Changed default value for SEB Config purpose to Starting an Exam. • Added separate allow downloads/uploads settings (allowDownloads = default true, allowUploads = default true), using AND with existing, but deprecated setting allowDownUploads. • Added option to block uploads and file/photo selection dialog for "Choose File" button in modern WebView (iOS). • Now keeping 20 log files instead of 7 (max. disk space: 20 MB). • Fixed logging in Swift classes and log level Error not working. • Now preventing that a web application can close the SEB main browser tab (the one containing the exam page). • Added missing classic WebView WebUIDelegate webViewClose: method (event handler called when web application attempts to close a WebView). • Fixed a possible crash in CustomHTTPProtocol (when using classic WebView on iOS). • Now using ConfigKey to identify stored running exam session for lock screen. This should avoid unnecessary lock screens if a new exam is opened, which is using the same start URL as an older locked exam. Optional features which need to be individually configured and are disabled by default: • App Signature Key functionality, which allows automated application integrity checks similar to the manual use of the Browser Exam Key (no copy-paste of hash string necessary). • New server-driven Browser Exam Key which can be used for improved SEB Server integration with LMS/assessment systems like Moodle. • Now showing "Disconnecting" window when quitting SEB Server session, for user feedback in case of connection issues. • Added error message alerts when specific steps of the connection process to a SEB Server exam fail, with more status messages in the SEB Server connection window. • Improved logging of SEB Server connections and fixed some error messages being too general. • Fixed a concurrency crash when quitting SEB with still active SEB Server connection when connection token may already have been invalidated.

February 25, 2023

• Fixed downloads of website generated files (using "data:" protocol scheme). • Now downloads of any file types and "blob:"-generated files are possible when using the modern WebView and iOS 14.5 or newer. These downloaded files also use the original file name (this wasn't possible in the classic WebView). • Another attempt to fix crash in when closing some web pages. New in SEB 3.2.3: • Fixed: Downloads of website-generated files were not working in SEB 3.1.1 and 3.2.2. • Fixed crash when closing a tab. New in SEB 3.2.2: • Now displaying camera & microphone permission dialogs for web applications and optional built-in proctoring before starting session. • Added new settings browserMediaCaptureCamera and browserMediaCaptureMicrophone (Settings / Browser Features / Media Playback/Capture / Allow Camera/Microphone Capture) for controlling browser access to camera/microphone (WebRTC or still pictures/audio recording). If these settings are enabled, users will be asked to grant access to camera/microphone for SEB before the according (exam) session is started. • Improved MDM configuration to better recognize configuration changes. • Fixed crash when configured via MDM: This happened when a config contained prohibited processes. • Fixed crash when a web page tab is close by Javascript (when using modern WebView). • Fixed file name of shared config file in iOS was not reset together with all other settings. • Fixed additional stability issues. Optional features which need to be individually configured and are disabled by default: • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues. • Added support for fallback option when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new fallback password. • Improved stability in case of misconfigured SEB Server exams. • Improved sending log events, to prevent loosing single events due to temporary connectivity issues. • Now sending device info to SEB Server earlier in the connection process. • Renew expired SEB Server OAuth token.

January 26, 2023

• Fixed: Downloads of website-generated files were not working in SEB 3.1.1 and 3.2.2. • Fixed crash when closing a tab. New in SEB 3.2.2: • Now displaying camera & microphone permission dialogs for web applications and optional built-in proctoring before starting session. • Added new settings browserMediaCaptureCamera and browserMediaCaptureMicrophone (Settings / Browser Features / Media Playback/Capture / Allow Camera/Microphone Capture) for controlling browser access to camera/microphone (WebRTC or still pictures/audio recording). If these settings are enabled, users will be asked to grant access to camera/microphone for SEB before the according (exam) session is started. • Improved MDM configuration to better recognize configuration changes. • Fixed crash when configured via MDM: This happened when a config contained prohibited processes. • Fixed crash when a web page tab is close by Javascript (when using modern WebView). • Fixed file name of shared config file in iOS was not reset together with all other settings. • Fixed additional stability issues. Optional features which need to be individually configured and are disabled by default: • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues. • Added support for fallback option when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new fallback password. • Improved stability in case of misconfigured SEB Server exams. • Improved sending log events, to prevent loosing single events due to temporary connectivity issues. • Now sending device info to SEB Server earlier in the connection process. • Renew expired SEB Server OAuth token.

January 7, 2023

• Now displaying camera & microphone permission dialogs for web applications and optional built-in proctoring before starting session. • Added new settings browserMediaCaptureCamera and browserMediaCaptureMicrophone (Settings / Browser Features / Media Playback/Capture / Allow Camera/Microphone Capture) for controlling browser access to camera/microphone (WebRTC or still pictures/audio recording). If these settings are enabled, users will be asked to grant access to camera/microphone for SEB before the according (exam) session is started. • Improved MDM configuration to better recognize configuration changes. • Fixed crash when configured via MDM: This happened when a config contained prohibited processes. • Fixed crash when a web page tab is close by Javascript (when using modern WebView). • Fixed file name of shared config file in iOS was not reset together with all other settings. • Fixed additional stability issues. Optional features which need to be individually configured and are disabled by default: • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues. • Added support for fallback option when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new fallback password. • Improved stability in case of misconfigured SEB Server exams. • Improved sending log events, to prevent loosing single events due to temporary connectivity issues. • Now sending device info to SEB Server earlier in the connection process. • Renew expired SEB Server OAuth token.

September 15, 2022

• Added support for iOS 16. • Added all current major iOS version numbers to the setting 'Allow running from iOS version'. • Allows to use VPN for Automatic Client Configuration by searching the network. • Now asking for local network access permissions in Initial Configuration Assistant. • Added warning about wrong format of institution URL in Initial Configuration Assistant. • Fixed an issue when subsequent scanning of QR codes wasn't possible. • Fixed stability issues.

June 3, 2022

• Added text search for web pages (Note: Search in PDF files is currently not supported). • Added key shortcuts for reload (command-R), text search (cmd-F) and quitting exam session (cmd-shift-Q). • Added settings for default page/text zoom. • Added UI controls for zoom page in/out. • Improved SEB JavaScript API, which is compatible with the improved Safe Exam Browser integration in Moodle 4.0.x. This allows to use WebRTC camera and microphone access in Moodle. • Improved persisting of session cookies from WKWebView to WKWebView to avoid unexpected logout of the user on some websites. • JavaScript text input panel is now supported. • Now stopping media playback when closing tab or quitting session (including fullscreen and picture-in-picture) in modern WebView when running on iOS 14.5 or newer. • Fixed crash when starting SEB using an sebs:// link. • Improved displaying of PDF files. • Fixed a security issue with screen capturing. • Fixed an issue with Config Key and in-app settings. • Fixed an issue with URL filtering and opening links in new tabs. • On iOS 15, the new WebRTC permission API is used to prevent the repeated permissions dialog for a website to use camera/microphone access. • Added automatic reload when web content process terminated in modern WebView • Settings 'Enable JavaScript' and 'Block popups' are now supported for the modern WebView. • Improved stability. • SEB for iOS is now also localized for German. Optional features, which need to be individually configured and are disabled by default: - Now supporting battery level monitoring with SEB Server. Exam supporters can warn students when their devices run low on battery. • Added lock screen notifications and unlock by SEB Server. • Now sending operating system/device type information to SEB Server. • Now supporting OpenOLAT and Ans together with SEB Server.

September 21, 2021

• SEB 3.0.1 runs by default on iOS/iPadOS 15 • Fixed that a custom user agent and suffix wasn't updated when reconfiguring SEB. New in SEB 3.0 • Support for the modern WebKit browser engine, which increases performance, stability and compatibility with web applications. • Access to camera/microphone via WebRTC on iOS 14.3 or newer. • SEB 3.0 for iOS can now also be started with seb(s) links to servers requiring authentication (including Basic Auth). • With the SEB integration in Moodle 3.9 or newer, you can now use the "Launch Safe Exam Browser" button to open the quiz in SEB for iOS. • SEB JavaScript API, currently for querying app version details, Config Key and Browser Exam Key security elements. • Live remote proctoring using the free, open source video conferencing solution Jitsi Meet (https://jitsi.org/jitsi-meet/). You can use any Jitsi Meet server to test this feature, for example https://meet.jit.si (or install your own Jitsi Meet server). • AI (machine learning) supported proctoring detects if candidates disappear from the camera view or if other faces show up. Also suspicious face movements are detected and displayed with warning symbols in the video stream. The face tracking features work on-device and respect privacy. • SEB Server (see https://github.com/SafeExamBrowser/seb-server). In the web backend of SEB Server, an administrator can import exam metadata from a learning management system (LMS) and create SEB Server exams. The list of current exams is then displayed on the SEB clients connected to this SEB Server instance. • Both Jitsi remote proctoring and SEB Server require examination administrators to set up their own server instances (or use external service providers) and configure SEB clients to connect to those servers. SEB doesn't use any centralized server instances and the according features are by default disabled. • Fix for "Back to Safari" button/link function in visible Status Bar on iOS 14 before 14.5 in AAC kiosk mode. • SEB doesn't show context menu on phone numbers detected by the web view anymore.

June 15, 2021

• Support for the modern WebKit browser engine, which increases performance, stability and compatibility with web applications. • Access to camera/microphone via WebRTC on iOS 14.3 or newer. • SEB 3.0 for iOS can now also be started with seb(s) links to servers requiring authentication (including Basic Auth). • With the SEB integration in Moodle 3.9 or newer, you can now use the "Launch Safe Exam Browser" button to open the quiz in SEB for iOS. • SEB JavaScript API, currently for querying app version details, Config Key and Browser Exam Key security elements. • Live remote proctoring using the free, open source video conferencing solution Jitsi Meet (https://jitsi.org/jitsi-meet/). You can use any Jitsi Meet server to test this feature, for example https://meet.jit.si (or install your own Jitsi Meet server). • AI (machine learning) supported proctoring detects if candidates disappear from the camera view or if other faces show up. Also suspicious face movements are detected and displayed with warning symbols in the video stream. The face tracking features work on-device and respect privacy. • SEB Server (see https://github.com/SafeExamBrowser/seb-server). In the web backend of SEB Server, an administrator can import exam metadata from a learning management system (LMS) and create SEB Server exams. The list of current exams is then displayed on the SEB clients connected to this SEB Server instance. • Both Jitsi remote proctoring and SEB Server require examination administrators to set up their own server instances (or use external service providers) and configure SEB clients to connect to those servers. SEB doesn't use any centralized server instances and the according features are by default disabled. • Fix for "Back to Safari" button/link function in visible Status Bar on iOS 14 before 14.5 in AAC kiosk mode. • SEB doesn't show context menu on phone numbers detected by the web view anymore.