Skip to content

Releases: SafeExamBrowser/seb-win-refactoring

Safe Exam Browser 3.8.0

26 Sep 08:45
@dbuechel dbuechel
v3.8.0
bdaf0bc
Compare
Choose a tag to compare
Safe Exam Browser 3.8.0 Latest
Latest

Summary

This feature update provides production-ready screen proctoring functionality, a new configuration option for the lock screen background color and an improved network adapter implementation with new functionalities as well as important bug fixes and improvements.

Note

Starting with this release version, Safe Exam Browser for Windows requires a minimum operating system version of Windows 10 version 1803.

Important

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Completely deleted all Jitsi Meet and Zoom video proctoring code and removed WebView2 dependency.
  • Resolved false-positives happening due to historic VM hardware detection (#852).
  • Introduced new (wireless) network adapter implementation and authentication functionality.
  • Implemented index suffix for already existing files when downloading.
  • Ensured browser session remains active after reconfiguration by browser resource (#703).
  • Implemented configuration option for session integrity verification (#790).
  • Implemented new configuration value for background color of lock screen.
  • Corrected default values for down- and uploads.
  • Removed duplicated entries for default list of prohibited applications (#805).
  • Implemented reconfiguration safeguard and refactored and moved reconfiguration and session locking to new coordinator module.
  • Implemented fix for GHSA-9cr5-q96r-887f and refactored various integrity aspects.
  • Ensured monitoring is terminated before reconfiguration (#914).
  • Added missing default settings related to clipboard and ensured data processor is also executed with default settings.
  • Ensured page zoom via Ctrl+MouseWheel also works according to the respective configuration value.
  • Removed old browser engine runtime references.

The following optional features and changes are disabled by default and need to be configured individually:

  • Production-ready screen proctoring functionality including metadata collection and network redundancy.
  • Generic learning management system (LMS) and web application support for SEB Server integration.
  • Fixed session cookie name for user resolution with Moodle and SEB Server (#848).
  • Improved user session resolution with SEB Server.
  • Fixed bug where start URL query parameters wouldn't be applied when using SEB Server.

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.

Requirements

SEB 3.8.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The platform-specific setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.7.1

14 Jun 13:41
@dbuechel dbuechel
v3.7.1
b13f30a
Compare
Choose a tag to compare
Safe Exam Browser 3.7.1

Summary

This patch update provides an important bug fix for a concurrency issue which caused the client application component of SEB to crash randomly.

Important

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Fixed concurrency issue with configuration and browser exam key hash calculation (#883).

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.

Requirements

SEB 3.7.1 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The platform-specific setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.7.0

03 Apr 11:21
@dbuechel dbuechel
v3.7.0
ff16743
Compare
Choose a tag to compare
Safe Exam Browser 3.7.0

Summary

This feature update introduces the optional screen proctoring functionality, resolves an issue with the isolated clipboard and adds various new configuration options as well as important bug fixes and improvements.

Important

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Added Indonesian translation.
  • Fixed bug with registry data access.
  • Implemented always on configuration for display and system.
  • Implemented configuration values for critical and low battery charge thresholds.
  • Implemented configuration value for lock screen on user session change.
  • Fixed issue with registry monitoring and minor improvements (#747, #777).
  • Increased spacing between lock screen options.
  • Ensured pinch zooming also respects the zooming configuration value.
  • Implemented cross-window sharing of clipboard content for isolated clipboard policy (#764).
  • Added new configuration keys to allow down- and uploads separately and disabled down- and uploads by default.
  • Introduced new configuration key to control verification of cursor configuration (#755).
  • Added missing indirect wired video output technology.
  • Updated browser engine to version 121.3.130 (Chromium version 121.0.6167.184).

The following optional features and changes are disabled by default and need to be configured individually:

  • Disabled video proctoring with Jitsi Meet and Zoom as the functionality is deprecated and will be removed in a subsequent release.
  • Revised proctoring architecture to allow for simultaneous activation of different implementations.
  • Implemented screen proctoring functionality including metadata collection and network redundancy.

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.

Requirements

SEB 3.7.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The platform-specific setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.6.0

06 Dec 17:23
@dbuechel dbuechel
v3.6.0
7f4aee9
Compare
Choose a tag to compare
Safe Exam Browser 3.6.0

Summary

This feature update adds signature verification for third-party applications, provides version restriction by configuration file and adds an isolated clipboard implementation as well as important bug fixes and improvements.

This release version furthermore includes important security improvements of exploits discovered by students of TU Eindhoven, and we hereby would like to express our gratitude for the proactive, constructive and responsible vulnerability disclosure, namely and in no particular order to Angelos Mangos, Bence Barnabas Racsko, Paolo Pocol, Strahil Georgiev Peykov, Wiliam Dokov, Techna Huynh, Teun Peters and Andrei Tudor Popescu.

Important

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Fixed bug with quit URL where URLs not exactly matching the quit URL would also trigger a shutdown.
  • Implemented signature verification for application monitoring (#593).
  • Fixed false-positive VM detection due to virtual disk devices (#604).
  • Fixed missing BEK and CK headers after e.g. authentication redirection.
  • Added Spanish translation.
  • Updated target framework to .NET Framework 4.8 and changed setup bundle to also embed .NET setup bootstrapper.
  • Implemented version restriction functionality.
  • Improved virtual machine detection.
  • Implemented isolated clipboard functionality (#625).
  • Fixed issue where password dialog was visible but not having input focus during application startup (#323).
  • Fixed loading of MAC address for system info (#637).
  • Implemented basic cursor functionality (#606).
  • Added Splashtop to default list of prohibited applications.
  • Implemented support for configuration data URIs.
  • Implemented random desktop functionality.
  • Improved logging with respect to default settings initialization.
  • Added Pulseway RMM to default list of prohibited applications.
  • Fixed status info in Action Center WLAN control when wireless is enabled but not connected (i.e. using wired connection).
  • Added Dutch / Flemish translation (#713).
  • Fixed false positive VM detection for VirtualBox host systems (#669).
  • Fixed bug with ease of access configuration verification.
  • Added Russian translation (#723).
  • Added new Teams and OBS to prohibited applications (#725, #727).
  • Added Estonian translation (#716).
  • Updated browser engine to version 118.6.80 (Chromium version 118.0.5993.117).

The following optional features and changes are disabled by default and need to be configured individually:

  • Removed Zoom proctoring implementation and added error message when Zoom proctoring is active. Due to licensing issues Zoom live proctoring is only available for SEB Alliance members, please refer to https://safeexambrowser.org/alliance/members.html.
  • Added user identifier detection via Moodle plugin.

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.
  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.6.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The platform-specific setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.5.0

04 Apr 07:12
@dbuechel dbuechel
v3.5.0
8f667d6
Compare
Choose a tag to compare
Safe Exam Browser 3.5.0

Summary

This feature update adds the App Signature Key functionality for server sessions, contains the new server-driven Browser Exam Key and brings a new configuration option for the file system dialog along with various accessibility improvements as well as important bug fixes.

Important

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Fixed NullReferenceException when accessing CanNavigate properties of browser control (#576).
  • Fixed crash when using SEB without browser and pressing the Windows key (#589).
  • Fixed crash when third-party application has no title.
  • Changed wording in settings password dialog (#548).
  • Implemented new configuration option to show or hide the path of file system elements (#431).
  • Added Hyper-V to virtual machine detector.
  • Added Chrome Remote Desktop to default list of prohibited applications (#575)
  • Added basic user agent for network resource requests.
  • Various accessibility improvements and bugfixes.
  • Added VMware to PCI vendor blacklist.
  • Fixed resizing issue with lockscreen on display resolution change.
  • Fixed bug where ease of access configuration monitoring would trigger even though the service component is active.
  • Fixed ease of access exploit.
  • Fixed access to potentially uninitialized DOM in accessibility JavaScript code (#480, #499).
  • Implemented session integrity verification.
  • Implemented visual indication for active applications in taskbar.
  • Fixed crash when using tabulator key (#490).
  • Ensured setup bundle doesn't fail if a newer WebView2 runtime is already installed (#429).
  • Fixed crash when attempting to download file originating from data URL.
  • Fixed unit tests for client operation (#421).
  • Fixed crash caused by non-ASCII characters (e.g. Hebrew) in client log file path (#421).
  • When searching, enter now performs a forward search within a browser window.
  • Updated browser engine to version 111.2.20 (Chromium version 111.0.5563.65).

The following optional features and changes are disabled by default and need to be configured individually:

  • Fixed bug where network status log would be sent repeatedly when not connected and added threshold for value change.
  • Fixed hacks to control Zoom user interface (#521).
  • Implemented custom browser exam key defined by server.
  • Only search for an LMS session identifier when a server session is active (#552).
  • Updated Zoom WebSDK to version 2.10.1 and changed authentication to use SDK key and JWT token (#521).
  • Refactored server proxy by extracting request implementations.
  • Implemented basic mechanism for app signature key (ASK) exchange.
  • Fixed race condition happening with OAuth2 token renewal.
  • Added missing translation for server failure dialog.
  • Ensured multiple lock screen instructions sent by the server don't cause multiple lock screens.
  • Ensured open server connection gets closed when session start failed.

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.
  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.5.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The platform-specific setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.4.1

16 Nov 13:57
@dbuechel dbuechel
v3.4.1
516b759
Compare
Choose a tag to compare
Safe Exam Browser 3.4.1

Summary

This patch update fixes an issue with downloads originating from data URLs.

Starting with release version 3.4.0, the Browser Exam Key of SEB for Windows is platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Fixed crash when attempting to download file originating from data URL.
  • Updated browser engine to version 107.1.40 (Chromium version 107.0.5304.68).

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.
  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.4.1 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.4.0

05 Aug 16:21
@dbuechel dbuechel
v3.4.0
2954717
Compare
Choose a tag to compare
Safe Exam Browser 3.4.0

Summary

This feature update introduces major accessibility improvements, fixes the parent-child relationship for popup windows, further improves the SEB-Server integration and provides various other important improvements.

Starting with this release version, the Browser Exam Key of SEB for Windows is now also platform-specific, i.e. its value is different for the 32-bit (x86) and 64-bit (x64) build of the same version!

Changes

  • Accessibility improvements providing compatibility with screen readers & improved keyboard navigation (#278, #417).
  • Fixed parent-child relationship for popup windows (#240).
  • Implemented new network control showing wired as well as wireless network information.
  • Implemented keyboard activator for taskbar (WIN key).
  • Implemented new module to verify application integrity (#336).
  • Changed Browser Exam Key calculation to use algorithm provided by the integrity module by default.
  • Implemented new configuration option to control printing of web content (#434).
  • Implemented new registry setting to suppress find printer option in system print dialog (#434).
  • Removed animated border of runtime window in attempt to fix performance issue in virtualized environments (#378).
  • Added Windows 11 to system info and list of supported OS versions.
  • Changed and improved load error handling (resource requests do not trigger error message anymore).
  • Implemented functionality to automatically re-perform text search on browser navigation or reload.
  • Fixed keyboard system component to correctly display all installed keyboard layouts / input languages (#349).
  • Added status strip to Configuration Tool showing version and build number of the local SEB installation.
  • Fixed issues with internal PDF reader toolbar.
  • Implemented verification of BIOS manufacturer & name for VM detection.
  • Fixed setting all display settings of permissive configuration for browser configuration resource.
  • Fixed usage of unencrypted HTTP links.
  • Updated browser engine to version 103.0.12 (Chromium version 103.0.5060.134).

The following optional features and changes are disabled by default and need to be configured individually:

  • Ensured re-attempting to start a SEB Server session doesn't fail.
  • Improved stability of SEB Server connection by automatically updating OAuth2 token if it expires.
  • Now sending OS and SEB version information to SEB Server as early as possible.
  • Ensured SEB can't (re-)connect to a SEB Server if it already has an established connection to a SEB Server.
  • Disabled pre-join page for Jitsi Meet proctoring integration (#154).

Known Issues

  • Screen readers NVDA and JAWS are not compatible with kiosk mode Create New Desktop. If their usage is required, please use kiosk mode Disable Explorer Shell where they should work as expected.
  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.4.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.3.2

31 Jan 16:53
@dbuechel dbuechel
3.3.2
c5e51ae
Compare
Choose a tag to compare
Safe Exam Browser 3.3.2

Summary

This update adds a new JavaScript API to query the browser exam key (BEK) and configuration key (CK), improves the SEB-Server integration and fixes various issues.

Changes

  • Implemented JavaScript API to query browser exam key (BEK) and configuration key (CK).
  • Extended permissive configuration for configuration resources which require authentication.
  • Fixed bug where file system dialog failed to load network paths.
  • Improved termination mechanism for kiosk mode Disable Explorer Shell.
  • Fixed bug where embedded DisplayPort monitors weren't recognized as internal displays.
  • Implemented correct language header for browser.
  • Improved resource probing for network configuration resources.
  • Updated browser engine to version 97.1.11 (Chromium version 97.0.4692.71).

Optional features which need to be individually configured and are disabled by default

  • Implemented transmission of computer information to SEB Server.
  • Implemented reading ping interval from SEB Server connection configuration.
  • Implemented transmission of a notification to SEB Server when power supply connection changes.
  • Fixed bug with reconfiguration mechanism and SEB service component.

Known Issues

  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.
  • Browser window popups opened via JavaScript do not work as expected, see #240.

Requirements

SEB 3.3.2 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.3.1

22 Oct 15:18
@dbuechel dbuechel
3.3.1
05db975
Compare
Choose a tag to compare
Safe Exam Browser 3.3.1

Summary

This update improves the performance of the SEB-Server integration, adds a raise hand functionality for live remote proctoring with SEB-Server and fixes various minor issues.

Changes

  • Changed handling of WebView2 dependency in setup bundle to circumvent MSFT's continuing changes to the bootstrapper.
  • Added new configuration option for middle mouse button.
  • Ensured the main browser window always has input focus after startup.
  • Fixed issue in URL filter when processing mailto links.
  • Fixed visibility of reload button in browser windows to be according to active configuration value.
  • Removed obsolete browser zoom options in configuration tool.
  • Updated browser engine to version 92.0.25 (Chromium version 92.0.4515.131).

Optional features which need to be individually configured and are disabled by default

  • Implemented raise hand functionality for live remote proctoring with SEB-Server.
  • Improved performance of SEB-Server integration.
  • Updated integration of Zoom for live remote proctoring.
  • Changed transmission of LMS session identifier to SEB-Server to only take place once when the identifier changes.

Known Issues

  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.3.1 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading

Safe Exam Browser 3.3.0

03 Aug 10:55
@dbuechel dbuechel
3.3.0
4195ee8
Compare
Choose a tag to compare
Safe Exam Browser 3.3.0

Summary

This feature update introduces live proctoring with Zoom, adds support for basic screen sharing in the integrated browser and fixes various issues reported by the community.

Changes

  • Added support for basic screen sharing in the integrated browser (#99).
  • Implemented temporary file download & upload directory for integrated browser.
  • Fixed possible data leak in proctoring implementation.
  • Improved error message for display monitoring.
  • Improved generic start error message to always include the log files of the affected session.
  • Extended default list of prohibited applications.
  • Fixed issue where links in PDF documents didn't work due to a bug in the browser engine (see https://bitbucket.org/chromiumembedded/cef/issues/3143/pdf-link-navigation-not-working).
  • Updated browser engine to version 91.1.21 (Chromium version 91.0.4472.114).

Optional features which need to be individually configured and are disabled by default

  • Added live proctoring support for Zoom and improved live proctoring integration with SEB Server.
  • Improved handshake procedure with SEB Server.

Known Issues

  • Live proctoring isn't compatible with kiosk mode Create New Desktop due to an issue in WebView2 (see MicrosoftEdge/WebView2Feedback#960). Thus, if live proctoring is active, the kiosk mode will always automatically be set to Disable Explorer Shell.

Requirements

SEB 3.3.0 requires the prerequisites listed below in order to work correctly. These are automatically installed with the setup bundle and need only be manually installed when using the MSI packages.

Installation

Please use the setup bundle for installation! The setups are mainly provided for system administrators who require MSI packages for their automated installation procedures.

Assets 5
Loading