Skip to content

Releases: SafeExamBrowser/seb-mac

Safe Exam Browser 3.3.3

28 May 15:11
Compare
Choose a tag to compare

SEB 3.3 improves accessibility and security and allows to export SEB settings as fully contained configuration links or QR codes. Optionally it supports full SEB Server integration with Moodle. SEB 3.3.3 contains important security fixes: Please update soon!

When using the optional SEB Server, the App Signature Key functionality allows automated application integrity checks similar to the manual use of the Browser Exam Key. Additionally, the new server-driven Browser Exam Key can be used for improved SEB Server integration with LMS/assessment systems like Moodle.

New in SEB 3.3.3 (final Build 151C0):

  • Fixed a possible issue when sometimes SEB didn't open any window and had to be quit with cmd-Q.
  • Fixed some issues in the German localization.

New in SEB 3.3.3:

  • Added new setting in Browser pane to reload the full page after a connection error (instead of loading the failed URL. This is a workaround for some LMS/assessment system issues e.g. in Moodle.
  • Fixed that disabling spell check and auto correct sometimes didn't work in WKWebView: Disabled it completely (can't be configured anymore for macOS/iOS).
  • Changed WebKit Networking process blocking to not lock SEB when a WebKit networking process is running with elevated user priority.
  • Fixed: Permissions for microphone-only access didn't work.
  • Fixed: Text Replacements can be used in SEB.
  • Prevent Keyboard Viewer to be used, which still shows Text Replacements.
  • Now detecting and denying to run when custom Cocoa Text System key bindings are set.
  • Fixed: Chrome video conferencing was no longer stopped when using current Chrome versions.
  • Fixed using correct current session start URL (local/SEB Server exam).
  • Fixed: Settings menubar menu and cmd - S were available during exam in some cases.
  • Now clarifying in locked exam lock screen that the quit password of the current session needs to be entered to unlock SEB.
  • Output legacy SEB versions in user agent. Necessary to replace compromised SEB versions with 3.3.3.
  • Fixed an Xcode build error which caused SEB 3.3.2 to not run on macOS 10.13.

New in SEB 3.3:

  • Accessibility improvements: Menu to select open webpages (on SEB icon in the SEB Dock) can now be opened using VoiceOver with the VO-Shift-M shortcut (in addition to right click).
  • Improved accessibility announcements on various UI elements, also in SEB's Preferences menu.
  • Improved VoiceOver feedback when opening lock screens.
  • Support exporting SEB settings as configuration links and QR codes containing full SEB configuration. With these config links or QR codes it's no longer necessary to store a config file on a server.
  • Now it's possible to generate and save QR codes containing full SEB configurations directly as PNG image files from the Preferences menu.
  • Added option to export SEB settings as an unencrypted plist file for the MDM Managed Configuration feature (currently supported by iOS SEB clients).
  • New setting for removing default key/values from saved config files, which decreases size significantly (for example removing default prohibited processes). This is by default used for generated config link and QR code configurations and helpful for iOS MDM configuration for example with Jamf.
  • Unencrypted SEB configuration files for starting exams are now saved compressed with gzip.
  • Changed title of Config Files Preferences pane to Configurations and updated terminology.
  • Changed default value for SEB Config purpose to Starting an Exam.
  • Added separate allow downloads/uploads settings (allowDownloads = default true, allowUploads = default true), using AND with existing, but deprecated setting allowDownUploads.
  • Fixed crash when alert "File to Upload Not Found" is displayed (when Settings / Down/Uploads / Choose file to upload "… by only allowing to upload the same file downloaded before" is selected and no file was downloaded yet or a previously downloaded file is not found).
  • Don't create XULRunner URL filter rules anymore.
  • Changed some outdated default values.
  • Now keeping 20 log files instead of 7 (max. disk space: 20 MB).
  • Fixed logging in Swift classes and log level Error not working.
  • Now preventing that a web application can close the SEB main browser window (the one containing the exam page).
  • Fixed web application couldn't close a classic WebView.
  • Now using ConfigKey to identify stored running exam session for lock screen. This should avoid unnecessary lock screens if a new exam is opened, which is using the same start URL as an older locked exam.
  • Added new module to verify application integrity.
  • Added Chrome Remote Desktop Host to preset prohibited processes.
  • Added SEB version in Starting Exam (exam/settings) password dialog.
  • Changed minimal required macOS version to macOS 10.13.
  • Added macOS 14 Sonoma to the options for minimal required macOS version (and iOS 17 to the iOS settings) in Preferences/Security.
  • Fixed a possible concurrency crash when removing process list element.

Optional features which need to be individually configured and are disabled by default

  • App Signature Key functionality, which allows automated application integrity checks similar to the manual use of the Browser Exam Key (no copy-paste of hash string necessary).
  • New server-driven Browser Exam Key which can be used for improved SEB Server integration with LMS/assessment systems like Moodle. This feature allows full integration with Moodle, which requires an additional Moodle plugin to be installed (currently a pre-release version is available).
  • Now showing "Disconnecting" window when quitting SEB Server session, for user feedback in case of connection issues.
  • Now loading SEB Server quit session request with fallback in case of short connection outtakes.
  • Added error message alerts when specific steps of the connection process to a SEB Server exam fail, with more status messages in the SEB Server connection window.
  • Improved logging of SEB Server connections and fixed some error messages being too general.
  • Fixed a concurrency crash when quitting SEB with still active SEB Server connection when connection token may already have been invalidated.

Safe Exam Browser 3.3.2

15 Jan 23:25
Compare
Choose a tag to compare

SEB 3.3 improves accessibility and security and allows to export SEB settings as fully contained configuration links or QR codes. Optionally it supports full SEB Server integration with Moodle. SEB 3.3.2 fixes issues regarding file download, the Settings (formerly known as Preferences) window and allows exporting uncompressed configuration files (for example for directly importing it into Moodle). Also contains several security fixes: Please update soon!

When using the optional SEB Server, the App Signature Key functionality allows automated application integrity checks similar to the manual use of the Browser Exam Key. Additionally, the new server-driven Browser Exam Key can be used for improved SEB Server integration with LMS/assessment systems like Moodle.

New in SEB 3.3.2:

  • Added option to save settings "for starting an exam" uncompressed as plain text in the Save As… dialog. This is helpful for importing these configuration files into LMS/exam systems which don't support gzip compressed or encrypted config files (for example Moodle) or for manual editing.
  • WebInspector for debugging websites directly inside SEB using the modern WebView works now (no longer flickers if invoked on a website using the activated right mouse button and context menu option "Inspect Element").
  • Fixed some edge cases when the lock screen for "Prohibited process locked SEB" was displayed unnecessarily.
  • Fixed: Overriding security options in lock screen wasn't reset when reconfiguring.
  • Fixed that lock screen override for specific prohibited processes didn't work correctly.
  • The check for specific prohibited processes can now be overridden multiple times (again for newly detected prohibited processes).
  • Fixed: Wrong Browser Exam Key was displayed when starting SEB with alt/option key to directly display Settings (Preferences) window.
  • Fixed: Revert to Defaults doesn't remove outdated settings.
  • Fixed wrong message that settings were edited when closing Settings (Preferences) window (SEB started with alt/option key) even when no changes were performed.
  • Fixed crash when downloading files.
  • Fixed: No error message was displayed when attempting to download/open SEB configurations while this is disabled.
  • SEB no longer freezes on Quit button in "System Security Feature Disabled" lock screen.
  • Fixed: Javascript pop-up was not opening with activated URL filter.
  • Fixed: Reconfiguration after login didn't close additional browser windows.
  • Now preventing display of "Browse Time Machine Backups".
  • Fixed SEB Server Browser Exam Key is not recognized by Moodle when classic WebView is used.
  • Added workaround for SEB Server bug to send Browser Exam Key (BEK) in HTTP headers when Server BEK is used, even if setting sendBrowserExamKey = false.
  • Fixed aspect ratio scaling of Settings (Preferences) window. Removed horizontal ruler in Security pane.
  • Fixed updating Browser Exam Key salt when using Save As (always) and Save (never) for exam config.
  • Extended error message when Zoom proctoring is enabled in settings with "Due to Zoom licensing issues, Zoom live proctoring is only available for SEB Alliance members. Please see https://safeexambrowser.org/alliance.".
  • Added a new error case to prevent prohibited process locked SEB lock screen being displayed for "No such process" (already terminated).
  • Remove the outdated setting allowWLAN when saving configs.
  • Fixed: Wrong BEK displayed after saving a config.
  • Changed reporting interval for still running processes from 3 to 30 seconds.
  • Log console view in lock screens should now correctly scroll to bottom (if it was at the bottom before the new log entry appears).
  • Increased maximum height of log console scroll view to prevent longer logs to get cut off.

New in SEB 3.3:

  • Accessibility improvements: Menu to select open webpages (on SEB icon in the SEB Dock) can now be opened using VoiceOver with the VO-Shift-M shortcut (in addition to right click).
  • Improved accessibility announcements on various UI elements, also in SEB's Preferences menu.
  • Improved VoiceOver feedback when opening lock screens.
  • Support exporting SEB settings as configuration links and QR codes containing full SEB configuration. With these config links or QR codes it's no longer necessary to store a config file on a server.
  • Now it's possible to generate and save QR codes containing full SEB configurations directly as PNG image files from the Preferences menu.
  • Added option to export SEB settings as an unencrypted plist file for the MDM Managed Configuration feature (currently supported by iOS SEB clients).
  • New setting for removing default key/values from saved config files, which decreases size significantly (for example removing default prohibited processes). This is by default used for generated config link and QR code configurations and helpful for iOS MDM configuration for example with Jamf.
  • Unencrypted SEB configuration files for starting exams are now saved compressed with gzip.
  • Changed title of Config Files Preferences pane to Configurations and updated terminology.
  • Changed default value for SEB Config purpose to Starting an Exam.
  • Added separate allow downloads/uploads settings (allowDownloads = default true, allowUploads = default true), using AND with existing, but deprecated setting allowDownUploads.
  • Fixed crash when alert "File to Upload Not Found" is displayed (when Settings / Down/Uploads / Choose file to upload "… by only allowing to upload the same file downloaded before" is selected and no file was downloaded yet or a previously downloaded file is not found).
  • Don't create XULRunner URL filter rules anymore.
  • Changed some outdated default values.
  • Now keeping 20 log files instead of 7 (max. disk space: 20 MB).
  • Fixed logging in Swift classes and log level Error not working.
  • Now preventing that a web application can close the SEB main browser window (the one containing the exam page).
  • Fixed web application couldn't close a classic WebView.
  • Now using ConfigKey to identify stored running exam session for lock screen. This should avoid unnecessary lock screens if a new exam is opened, which is using the same start URL as an older locked exam.
  • Added new module to verify application integrity.
  • Added Chrome Remote Desktop Host to preset prohibited processes.
  • Added SEB version in Starting Exam (exam/settings) password dialog.
  • Changed minimal required macOS version to macOS 10.13.
  • Added macOS 14 Sonoma to the options for minimal required macOS version (and iOS 17 to the iOS settings) in Preferences/Security.
  • Fixed a possible concurrency crash when removing process list element.

Optional features which need to be individually configured and are disabled by default

  • App Signature Key functionality, which allows automated application integrity checks similar to the manual use of the Browser Exam Key (no copy-paste of hash string necessary).
  • New server-driven Browser Exam Key which can be used for improved SEB Server integration with LMS/assessment systems like Moodle. This feature allows full integration with Moodle, which requires an additional Moodle plugin to be installed (currently a pre-release version is available).
  • Now showing "Disconnecting" window when quitting SEB Server session, for user feedback in case of connection issues.
  • Now loading SEB Server quit session request with fallback in case of short connection outtakes.
  • Added error message alerts when specific steps of the connection process to a SEB Server exam fail, with more status messages in the SEB Server connection window.
  • Improved logging of SEB Server connections and fixed some error messages being too general.
  • Fixed a concurrency crash when quitting SEB with still active SEB Server connection when connection token may already have been invalidated.

Safe Exam Browser 3.3

20 Sep 14:32
Compare
Choose a tag to compare

SEB 3.3 improves accessibility and security and allows to export SEB settings as configuration links or QR codes. Optionally it supports full SEB Server integration with Moodle.

New in SEB 3.3:

  • Accessibility improvements: Menu to select open webpages (on SEB icon in the SEB Dock) can now be opened using VoiceOver with the VO-Shift-M shortcut (in addition to right click).
  • Improved accessibility announcements on various UI elements, also in SEB's Preferences menu.
  • Improved VoiceOver feedback when opening lock screens.
  • Support exporting SEB settings as configuration links and QR codes containing full SEB configuration. With these config links or QR codes it's no longer necessary to store a config file on a server.
  • Now it's possible to generate and save QR codes containing full SEB configurations directly as PNG image files from the Preferences menu.
  • Added option to export SEB settings as an unencrypted plist file for the MDM Managed Configuration feature (currently supported by iOS SEB clients).
  • New setting for removing default key/values from saved config files, which decreases size significantly (for example removing default prohibited processes). This is by default used for generated config link and QR code configurations and helpful for iOS MDM configuration for example with Jamf.
  • Unencrypted SEB configuration files for starting exams are now saved compressed with gzip. If you need to save unencrypted plain text config files, use the MDM Managed Configuration format and change the file extension to .seb.
  • Changed title of Config Files Preferences pane to Configurations and updated terminology.
  • Changed default value for SEB Config purpose to Starting an Exam.
  • Added separate allow downloads/uploads settings (allowDownloads = default true, allowUploads = default true), using AND with existing, but deprecated setting allowDownUploads.
  • Fixed wrong Windows setting to allowCustomDownUploadLocation
  • Don't create XULRunner URL filter rules anymore.
  • Changed some outdated default values.
  • Now keeping 20 log files instead of 7 (max. disk space: 20 MB).
  • Fixed logging in Swift classes and log level Error not working.
  • Now preventing that a web application can close the SEB main browser window (the one containing the exam page).
  • Fixed web application couldn't close a classic WebView.
  • Now using ConfigKey to identify stored running exam session for lock screen. This should avoid unnecessary lock screens if a new exam is opened, which is using the same start URL as an older locked exam.
  • Added new module to verify application integrity.
  • Added Chrome Remote Desktop Host to preset prohibited processes.
  • Added SEB version in Starting Exam (exam/settings) password dialog.
  • Changed minimal required macOS version to macOS 10.13.
  • Added macOS 14 Sonoma to the options for minimal required macOS version (and iOS 17 to the iOS settings) in Preferences/Security.
  • Fixed a possible concurrency crash when removing process list element.

Optional features which need to be individually configured and are disabled by default

  • App Signature Key functionality, which allows automated application integrity checks similar to the manual use of the Browser Exam Key (no copy-paste of hash string necessary).
  • New server-driven Browser Exam Key which can be used for improved SEB Server integration with LMS/assessment systems like Moodle. This feature allows full integration with Moodle, which requires an additional Moodle plugin to be installed (currently a pre-release version is available).
  • Now showing "Disconnecting" window when quitting SEB Server session, for user feedback in case of connection issues.
  • Now loading SEB Server quit session request with fallback in case of short connection outtakes.
  • Added error message alerts when specific steps of the connection process to a SEB Server exam fail, with more status messages in the SEB Server connection window.
  • Improved logging of SEB Server connections and fixed some error messages being too general.
  • Fixed a concurrency crash when quitting SEB with still active SEB Server connection when connection token may already have been invalidated.

Safe Exam Browser 3.2.5 (DEPRECATED)

29 Mar 20:55
Compare
Choose a tag to compare

PLEASE DO NOT USE THIS VERSION ANYMORE. If your exam provider doesn't support the latest SEB version, tell them they should do so. This version contains bugs, is no longer supported by us and shouldn't be used in exams anymore!

New in SEB 3.2.5:

  • Fixed: Force Click lookup was working in the classic WebView in macOS 13 Ventura.

New in SEB 3.2.4:

  • Blocking AnyGPT by default.
  • Fixed: Untimely modal alert freezes SEB. Modal alerts were sometimes displayed behind the black background covering windows.
  • Security improvements.
  • Fixed download directory bug from SEB 3.2.3 for macOS.
  • Now also showing "Downloads not Allowed" alert in modern WebView if settings don't allow downloads and in one case for downloads in classic WebView on macOS.
  • Now checking if download directory is correctly set when performing download in WKWebView. If not, the Downloads directory is used.
  • Now also correctly handling PDF files in modern WebView when downloading is disabled (then PDF files even with a "download" link are displayed instead of downloaded).
  • Considering the setting newBrowserWindowByLinkPolicy = openInSameWindow: Don't open a PDF in a new window then.
  • Now also handling settings "Open files after downloading" and "Download and open PDF files instead of displaying them inline" correctly in the modern WebView.
  • Fixed "Choose file to upload ... by only allowing to upload the same file downloaded before" policy, which was not working in the modern WebView. Also resetting previous download paths when reconfiguring SEB.
  • When using the optional SEB Server, an SEB client can be locked (with a red lock screen with optional, individual message) and again unlocked by the server.
  • Now sending notification to SEB Server when any lock screen is closed on client (by entering the quit password).
  • Fixed a notification issue when using the raise/lower hand feature.

New since 3.2.3/3.2.2/3.2.1:

  • Fixed downloads of website generated files (using "data:" protocol scheme) in modern WebView.
  • Now downloads of any file types and "blob:"-generated files are possible when using the modern WebView and macOS 11.3 or newer.
  • Fixed crash when closing some web pages.
  • Fixed: Force Click lookup was working in the modern WebView.
  • Fixed red lock screen after user switch disappeared without user action.
  • Latest TeamViewer version wasn't blocked by default.
  • Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
  • Improved logging verbosity, to prevent log files to be full of repeating log events.
  • Added macOS 13 Ventura as option for minimum macOS version.
  • Fixed reload key shortcut not enabled correctly according to reload settings and selected window (main/additional).
  • Fixed a null reference exception in injected Javascript code, related to the "download" attribute on links.
  • Fixed Cancel button in the macOS SEB Server (optional) fallback password alert and improved alert feedback text in case of an empty fallback password.

Optional features which need to be individually configured and are disabled by default

  • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
  • Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
  • Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
  • Now sending device info to SEB Server earlier in the connection process.
  • Renew expired SEB Server OAuth token.
  • Fixed cleaning up of pending requests to SEB Server.
  • Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.2.4

23 Mar 18:44
Compare
Choose a tag to compare

New in SEB 3.2.4:

  • Blocking AnyGPT by default.
  • Fixed: Untimely modal alert freezes SEB. Modal alerts were sometimes displayed behind the black background covering windows.
  • Security improvements.
  • Fixed download directory bug from SEB 3.2.3 for macOS.
  • Now also showing "Downloads not Allowed" alert in modern WebView if settings don't allow downloads and in one case for downloads in classic WebView on macOS.
  • Now checking if download directory is correctly set when performing download in WKWebView. If not, the Downloads directory is used.
  • Now also correctly handling PDF files in modern WebView when downloading is disabled (then PDF files even with a "download" link are displayed instead of downloaded).
  • Considering the setting newBrowserWindowByLinkPolicy = openInSameWindow: Don't open a PDF in a new window then.
  • Now also handling settings "Open files after downloading" and "Download and open PDF files instead of displaying them inline" correctly in the modern WebView.
  • Fixed "Choose file to upload ... by only allowing to upload the same file downloaded before" policy, which was not working in the modern WebView. Also resetting previous download paths when reconfiguring SEB.
  • When using the optional SEB Server, an SEB client can be locked (with a red lock screen with optional, individual message) and again unlocked by the server.
  • Now sending notification to SEB Server when any lock screen is closed on client (by entering the quit password).
  • Fixed a notification issue when using the raise/lower hand feature.

New since 3.2.3/3.2.2/3.2.1:

  • Fixed downloads of website generated files (using "data:" protocol scheme) in modern WebView.
  • Now downloads of any file types and "blob:"-generated files are possible when using the modern WebView and macOS 11.3 or newer.
  • Fixed crash when closing some web pages.
  • Fixed: Force Click lookup was working in the modern WebView.
  • Fixed red lock screen after user switch disappeared without user action.
  • Latest TeamViewer version wasn't blocked by default.
  • Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
  • Improved logging verbosity, to prevent log files to be full of repeating log events.
  • Added macOS 13 Ventura as option for minimum macOS version.
  • Fixed reload key shortcut not enabled correctly according to reload settings and selected window (main/additional).
  • Fixed a null reference exception in injected Javascript code, related to the "download" attribute on links.
  • Fixed Cancel button in the macOS SEB Server (optional) fallback password alert and improved alert feedback text in case of an empty fallback password.

Optional features which need to be individually configured and are disabled by default

  • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
  • Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
  • Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
  • Now sending device info to SEB Server earlier in the connection process.
  • Renew expired SEB Server OAuth token.
  • Fixed cleaning up of pending requests to SEB Server.
  • Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.2.3

25 Feb 20:31
Compare
Choose a tag to compare

SEB 3.2.3 improves the optional support for SEB Server and adds many stability improvements.

New in 3.2.3:

  • Fixed downloads of website generated files (using "data:" protocol scheme) in modern WebView.
  • Now downloads of any file types and "blob:"-generated files are possible when using the modern WebView and macOS 11.3 or newer.
  • Another attempt to fix crash when closing some web pages.

New since 3.2.2/3.2.1:

  • Fixed: Force Click lookup was working in the modern WebView.
  • Fixed red lock screen after user switch disappeared without user action.
  • Latest TeamViewer version wasn't blocked by default.
  • Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
  • Improved logging verbosity, to prevent log files to be full of repeating log events.
  • Added macOS 13 Ventura as option for minimum macOS version.
  • Fixed reload key shortcut not enabled correctly according to reload settings and selected window (main/additional).
  • Fixed a null reference exception in injected Javascript code, related to the "download" attribute on links.
  • Fixed Cancel button in the macOS SEB Server (optional) fallback password alert and improved alert feedback text in case of an empty fallback password.

Optional features which need to be individually configured and are disabled by default

  • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
  • Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
  • Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
  • Now sending device info to SEB Server earlier in the connection process.
  • Renew expired SEB Server OAuth token.
  • Fixed cleaning up of pending requests to SEB Server.
  • Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.2.2

19 Dec 11:35
Compare
Choose a tag to compare

SEB 3.2.2 improves the optional support for SEB Server and adds many stability improvements.

  • Fixed: Force Click lookup was working in the modern WebView.
  • Fixed red lock screen after user switch disappeared without user action.
  • Latest TeamViewer version wasn't blocked by default.
  • Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
  • Improved logging verbosity, to prevent log files to be full of repeating log events.
  • Added macOS 13 Ventura as option for minimum macOS version.

Fixed from 3.2.1:

  • Fixed reload key shortcut not enabled correctly according to reload settings and selected window (main/additional).
  • Fixed a fix in 3.2.1, which caused that properties like "active" of prohibited processes couldn't be set correctly.
  • Fixed a null reference exception in injected Javascript code, related to the "download" attribute on links.
  • Fixed Cancel button in the macOS SEB Server (optional) fallback password alert and improved alert feedback text in case of an empty fallback password.

Optional features which need to be individually configured and are disabled by default

  • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
  • Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
  • Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
  • Now sending device info to SEB Server earlier in the connection process.
  • Renew expired SEB Server OAuth token.
  • Fixed cleaning up of pending requests to SEB Server.
  • Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.2.1

05 Dec 09:04
Compare
Choose a tag to compare

SEB 3.2.1 Improves the optional support for SEB Server and adds many stability improvements.

  • Fixed: Force Click lookup was working in the modern WebView.
  • Fixed red lock screen after user switch disappeared without user action.
  • Latest TeamViewer version wasn't blocked by default.
  • Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
  • Improved logging verbosity, to prevent log files to be full of repeating log events.
  • Added macOS 13 Ventura as option for minimum macOS version.

Optional features which need to be individually configured and are disabled by default

  • Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
  • Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
  • Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
  • Now sending device info to SEB Server earlier in the connection process.
  • Renew expired SEB Server OAuth token.
  • Fixed cleaning up of pending requests to SEB Server.
  • Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.1.1

03 Oct 09:40
Compare
Choose a tag to compare

SEB 3.1.1 for macOS solves various issues, supports screen sharing for web applications and improves support for the AAC Assessment (kiosk/lockdown) Mode.

New in 3.1.1:

  • SEB should download PDF file instead of displaying it, when a "download" attribute or "Content-Disposition" header with attachment filename is present.
  • Display correct error message when downloading is disabled and attempting to download website generated files.
  • Fixed default and optional values for minimum macOS and iOS versions and iOS beta version.
  • Removed string "/response" when asking for quit/unlock password in lock screens.
  • Fixed missing German localization of one sentence.
  • New settings browserMediaCaptureCamera and browserMediaCaptureMicrophone (Preferences / Browser / Allow camera/microphone capture) for controlling browser access to camera/microphone (WebRTC or still pictures/audio recording). If these settings are enabled, users will be asked to grant access to camera/microphone for SEB before the according (exam) session is started. This prevents that these permission dialogs weren't displayed when the AAC Assessment kiosk mode was used. In macOS 12/iOS 15 or later disabling these settings prevents web applications from accessing camera/microphone in any case.
  • Fixed AAC Assessment Mode availability check according to feedback from Apple that AAC works without DNS pre-pinning only on macOS 12.1 or newer (and probably on macOS Catalina 10.15.4 and >=10.15.6.
  • Added DNS pre-pinning when using AAC on macOS <12.1, according to new setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning). SEB will then resolve all domains from settings Start URL and URL filter Allow rules before activating AAC (as in macOS <12.1 DNS lookup doesn't work). You can define allow rules and if you don't actually need URL filtering deactivate it afterwards (Preferences / Network / Activate URL filtering) or deactivate single URL filter rules with its Active property. To ensure that DNS lookup works for your web application, you need to add all domains and subdomains as Allow filter rules (don't forget for example domains which are contacted for single-sign-on). Note: Without activating the setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning), AAC will only be used on macOS Catalina 10.15.4 and >=10.15.6 and macOS Monterey 12.1 or newer (not on macOS Big Sur 11.0 - Monterey 12.0). If you want to enforce the use of AAC on all these systems, you either need to use the Use AAC with DNS pre-pinning setting or enforce that only macOS 12.1 or newer is used (Preferences / Security / Allow running from macOS version / Check full macOS version number / enter 12 for Major version number and 1 for Minor version number).
  • Now supporting full screen for web videos, but because of macOS limitations this only works with modern WebView and the AAC Assessment Mode (not the default SEB kiosk mode). If you cannot enforce using AAC, you have to implement a pseudo full screen display (enlarging video to the full browser window) in your web application.
  • Fixed Javascript window.open() didn't return window object.
  • Fixed setting allowDownUploads wasn't updated from client config when starting with seb(s) settings. In that case "Download not allowed" is displayed even if exam settings have downloads allowed.
  • Improved user interface on MacBook Pro with camera notch (bump).
  • Support for getDisplayMedia() API for WebRTC screen sharing when running on macOS 11 Big Sur, macOS 12 Monterey or macOS 13 Ventura Beta 4 or later. Requires new setting browserMediaCaptureScreen = true (default value is false).
  • Fixed iFrame contents not displayed.
  • Fixed media continues to play after the originating browser tab is closed in modern WebView.
  • Fixed error when connecting to SEB Server (optional, needs to be configured individually) and the "expires_in" attribute in the Oauth token response is missing. Added proper optionality to other attributes in this token response JSON.

Safe Exam Browser 3.1

03 Jun 21:12
Compare
Choose a tag to compare

SEB 3.1 adds support for accessibility/VoiceOver, text search in browser windows, optional support for SEB Server and many stability improvements.

  • Implemented accessibility support using VoiceOver and tabulator keyboard navigation (if keyboard navigation in System Preferences/Keyboard/Shortcuts is activated).
  • Added new setting Preferences / Browser / "Tab focuses links" (key tabFocusesLinks, enabled by default) to allow to use tabulator key to move between links and controls on a web page.
  • Improved accessibility in Preferences: Fixed tabbing to controls only worked in first preferences pane displayed. Fixed tab order of some buttons in Config pane.
  • Refactored SEB Javascript API to update the SafeExamBrowser.security.browserExamKey and security.configKey variables directly when loading a web page, without having to call the security.updateKeys(callback) function.
  • Added a custom reload() method to the SEB macOS WKWebView, so that the BEK/CK variables are set correctly also after a reload of a web page.
  • Now updateKeys() can also be called without a callback method.
  • Now supporting page zoom with pinch-to-zoom on a Mac trackpad (when using modern WebView and page zoom is enabled in SEB settings).
  • Added settings for default page level (defaultPageZoomLevel) and default text zoom level (defaultTextZoomLevel) in Preferences / User Interface. Now also limiting zoom to predefined minimum and maximum levels. These settings currently only work in the modern WebView.
  • Added new macOS 12/iOS 15 API to prevent the repeatedly displayed WebRTC permissions dialog for a website to use camera/microphone access.
  • Added text search for web pages: Use the search icon in the browser window toolbar or cmd-F. This feature is not available in the full screen mode main window. Search in PDFs works only in modern WebView and macOS >=11 / iOS >= 14.
  • Added preset prohibited process for Universal Control.
  • Added missing SEB for Windows (3.3.2) settings to Preferences.
  • Added basic settings for SEB Server to Preferences / General.
  • Added automatic reload when web content process terminated in modern WebView.
  • Added separate macOS setting for allowing right mouse click: Preferences / Browser / Enable right mouse, key enableRightMouseMac.
  • Implemented Javascript text input panel (see issue #163 ).
  • Fixed clearing cookies and web cashes etc. when quitting SEB.
  • Now logging macOS version in SEB logs.
  • Changed log level of very repetitive events to Verbose, to improve usefulness of logs when using SEB Server.
  • Fixed starting SEB with exam configuration when client settings are secure (have a quit password set).
  • Fixed keyboard shortcuts and menu bar menu items for reload and page/text zoom.
  • Removed/updated SEB Win 2.x settings in Browser pane (Allow video/audio capture), User Interface pane ("Enable touch exit (Win)",
    "Zoom mode Win (Ctrl-Mousewheel)") and Security pane / Hooked Keys (Enable right mouse now only for Win).
  • Updated text (and tool tip) for SEB Win 2.x settings "Remote profile (Win" in Browser pane to "Clear cache (Win)".
  • Fixed conditional reload button display, reload warning and navigation settings.
  • Fixed web page title/URL wasn't updated after reload in modern WebView.
  • Now supporting the settings browserWindowShowURL/newBrowserWindowShowURL = browserWindowShowURLAlways also in SEB for macOS.
  • Fixed: SEB attempts to download PDF file instead of displaying it.
  • Fixed: Session cookies not persisted in Moodle from webpage in WKWebView to downloading config to page in WKWebView.
  • Fixed another rare case of session cookies not persisted in Moodle from webpage with WKWebView to another page with WKWebView.
  • Attempt to fix SEBOSXWKWebViewController didReceiveAuthenticationChallenge randomly crashes on Apple Silicon (see issue #176 ).
  • Updated alert text to "Force Quit window or another system frontmost dialog".
  • Safe Exam Browser Xcode build Scheme (macOS) is now set to "shared" and contained in the repository.
  • Fixed: Opening downloaded files doesn't work.
  • No longer transferring session cookies with same name and domain from NSHTTPCookieStorage to WKWebView httpCookieStore.
  • Fixed: Downloads didn't work.
  • Fixed PDF files with "download" tag parameter were not downloaded but displayed in modern WebView.
  • If downloading is disabled, PDF files with "download" tag parameter are displayed in a new browser window (and their file name is used as webpage/window title).
  • Fixed setting "download and open PDF files instead of displaying" didn't open downloaded PDF.
  • Fixed determining filenames which contain a space from "Content-Disposition" "attachment; filename="..."
  • Fixed PDF files which should be downloaded ("download" tag parameter) might not have been recognized.
  • Fixed saving paths of downloaded files for automatically choosing files for upload.
  • Fixed: Settings Preferences / Browser / "Enable JavaScript" and "Block pop-up windows" in modern WebView.
  • Fixed: (Apple) Messages app set as prohibited process is not quit by SEB.
  • Fixed: Time is truncated in SEB dock/taskbar when changing dock size for various dock sizes.
  • Fixed: SEB crashes when restarting while using full screen mode.
  • Fixed: Spellchecking not disabled in Moodle rich-text editor when using WKWebView.
  • Fixed: Legacy screen shot blocking not working.
  • Opted-out of Dark Mode in SEB for macOS.
  • Fixed: Copy-paste into text fields in Preferences window doesn't work.
  • Fixed: Paste from saved clipboard doesn't work when SEB is started with held option/alt key (to directly open the Preferences window).
  • SEB crashes when opening file upload dialogue: Fixed and added alert for uploading/downloading not allowed.
  • Fixed: Content-Disposition 'inline; ' interpreted as 'attachment; filename=...'
  • Fixed: Load error in WKWebView (at least for startURL) is not displayed.
  • Now stopping media playback when closing tab or quitting session (incl. fullscreen and PiP) in modern WebView (WKWebView) also when running on macOS 11.3 or newer.
  • "Prohibited Process Locked SEB" doesn't show process name/URL: Now process name and appURL information should always be displayed if it was available.
  • Attempting to fix unnecessarily displayed lock screen for process couldn't be terminated.
  • Added additional preset default prohibited process for AnyDesk.
  • Fixed toolbar Reload button width in older macOS versions.

Optional features which need to be individually configured and are disabled by default

  • Support for lock screen notifications when connected to SEB Server. The notification is displayed with a bell symbol in front of the user name in the Running Exam monitoring view. Clicking the user name shows the error message which invoked a lock screen.
  • Lock screens can be unlocked from SEB Server (without having to communicate the Quit/Unlock password to students). Note that you have to confirm all pending lock screen notifications for a user if there are several before the lock screen closes.
  • Now sending computer/environment information to SEB Server (ONLY when connecting to an SEB Server instance is configured in individual settings): Local short user/account name, operating system version and device type (iPhone, iPad, iPod Touch), SEB version and machine name.
  • Now supporting battery monitoring by SEB Server.
  • Prevent reconfiguring an SEB Server exam with an exam config containing SEB Server connection settings.
  • Fixed implementation of general integration approach to receive the user identifier from an LMS and finish the handshake with SEB Server (currently supported by development versions of OpenOLAT and Ans).
  • Implemented workaround for receiving Moodle user identifier when using a SSO system like AAI/Shibboleth (requires a special Moodle PHP script, temporary solution until the full SEB Server integration for Moodle is implemented).