8.9 (stable)

Important Changes

• Services/PDFGeneration
  • Since the development for wkhtmltopdf has stopped and the consumer for the service are regressive, the jour Fixe decided to deprecate the PDFGeneration Service with ILIAS 8 and to remove this service with ILIAS 9
  • https://docu.ilias.de/goto_docu_wiki_wpage_7795_1357.html
• Plugins
  • Plugins which provide a configuration screen must add an explicit `ilCtrl` directive in the PHPDoc comments of the `il*ConfigGUI` class.
    • Example:
      • /**
         * @ilCtrl_IsCalledBy ilMyPluginConfigGUI: ilObjComponentSettingsGUI
         */
        class ilMyPluginConfigGUI extends ilPluginConfigGUI
        {
            // Code ...
        }
  • Many public methods of class `ilPluginAdmin` (often considered as public API of the component service in ILIAS by developers) were removed. The class itself is marked as deprecated and will be removed in future ILIAS releases. Plugin developers should use `ilComponentRepository` and `ilComponentFactory` instead. Implementations of these interfaces can be retrieved from the dependency injection container ($DIC["component.repository"] and $DIC["component.factory"]).
  • Please always execute a `composer du` command if you put a new plugin into the plugin directories in your filesystem or if you applied any changes to your `plugin.php`. Otherwise the plugin will not be listed in the global ILIAS plugin administration or may cause other problems.
• Workflow Engine
  • Due to low demand and security issues, we removed the workflow engine with 7.23 and 8.3
• OpenIDConnect
  • We switched the implementation from the "Implicit Flow" (e.g. because of https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#name-attacks-on-the-implicit-flo)  to the "Authorization Code Flow".
• SAML
  • Please read https://github.com/ILIAS-eLearning/ILIAS/blob/release_8/Services/Saml/README.md#ilias-configuration and https://github.com/ILIAS-eLearning/ILIAS/blob/release_8/src/HTTP/README.md#dropinreplacements

Known Issues

• none

Changed Behaviour

• See changes concerning uploading ZIPs and unzipping here: Drag&Drop Files in Container Objects
• The visibility of the user administration has been adjusted. For a read-only access, the permission "Read" and no longer "Read Access to User Accounts" is used. Mantis 37269.
• T&A: "Auto-saved" or intermediate answers are not saved anymore as authorized answers when the set test duration limit ends.

Security Fixes

#39530: [¥ Web Access Checker] Referer can circumvent WAC permission check (offscript)
#40096: [Learning Module SCORM 2004] SCORM 2004: Arbitrary File Deletion (Rene Rehme (rehme.infosec))
#40095: [Learning Module SCORM 2004] SCORM 2004: Local File Inclusion (Rene Rehme (rehme.infosec))
#40225: [User Tracking] LegacyUIComponents/Tabs: XSS in "Back" link (Rene Rehme (rehme.infosec))
#40220: [Mail] Mail: XSS in User Folders (Rene Rehme (rehme.infosec))
#40363: [Learning Module SCORM 2004]  Stored XSS
#40097: [Learning Module SCORM 2004] SCORM Import: Possible Remote Code Execution (Rene Rehme (rehme.infosec))
#40066: [Search] Search: Reflected XSS in Lucene search form (Sasi Kumar)
#40223: [Search] Search: XSS in search results page (Rene Rehme (rehme.infosec))

Fixed Issues

The following issues reported in Mantis have been resolved:

#40478: [Administration] After upgrade from 7.27 to 8.8, Learning Module ILIAS not accessible (akill)
#38294: [Badges] uploading an image for an Object related Badge leads to crash (smeyer)
#36688: [Category and Repository] Filter wird im "Sortieren"-Tab angezeigt (akill)
#40238: [Category and Repository] Course cannot be opened / content cannot be displayed (akill)
#39512: [Comments] Kommentare in Test wird eingeblendet, obwohl deaktiviert (akill)
#33815: [Course Management] Add new course -> Copy Course -> "Rows" or "Title/Description" (skergomard)
#36204: [Course Management] Usability Fix: show offline status of learning objective materials (smeyer)
#36725: [Course Management] Move adopt content in upper toolbar (akill)
#37525: [Course Management] An Error occured while assigning user to group ! (tschmitz)
#39308: [Course Management] It`s not possible to adopt (link) all object from a specific course (akill)
#40173: [Course Management] Failed test: $$ Ansicht des Mitgliederreiters ändern (smeyer)
#40178: [Course Management] Failed test: Mitgliederdaten exportieren (smeyer)
#40490: [Course Management] false tab is highlighted when deleting objects in course (smeyer)
#40491: [Course Management] no tab is highlighted when deleting objects in folder (akill)
#40302: [Cron Service] Start times of Cron Jobs do not respect timezone (mjansen)
#38914: [Group] Timeline ILIAS 8.6: No paragraphs (akill)
#31428: [ILIAS Page Editor] Change texts of mini-manual in slate (akill)
#33779: [ILIAS Page Editor] Failed test: Mainbar: Tools (akill)
#34446: [ILIAS Page Editor] Start before Enddate (akill)
#36557: [ILIAS Page Editor] "Unsupported Media Type" not translated and without notification banner (akill)
#38222: [ILIAS Page Editor] Content Style Editor: cannot add new colour -> error (akill)
#38228: [ILIAS Page Editor] Cannot copy table cell style within Content Style Editor (akill)
#38747: [ILIAS Page Editor] big icons in history of page editor (akill)
#39022: [ILIAS Page Editor] Empty form for content style editing when changing @media (akill)
#40370: [ILIAS Page Editor] Link Areas on images in page editor not possible (akill)
#23750: [Learning Module ILIAS : Editor] Learning Module -> Add glossary (akill)
#34295: [Learning Module ILIAS : Editor] Activ sub tab is not highlighted (akill)
#36921: [Learning Module ILIAS : Editor] Glyphe für Lernmodulseite liefert Tooltip mit Verzeichnis (akill)
#39234: [Learning Module ILIAS : Presentation] Failed test: Interne Links anklicken (ohne Bearbeitungsrechte) (akill)
#38416: [Learning Module SCORM 1.2] import of a scorm-export out of ILIAS 7 Learning Module ILIAS crashes (ukohnle)
#38415: [Learning Module SCORM 2004] import of a scorm-export out of ILIAS 7 Learning Module ILIAS crashes (ukohnle)
#38888: [Learning Module SCORM 2004] Datenbankfeld zu klein beim Kopieren eines Tests (ukohnle)
#35457: [Mediacast] Mediacast -> Select File -> Immediately click Safe (akill)
#37200: [Mediacast] RSS Button not showing in "Content"- "View" tab (akill)
#37324: [Mediacast] RSS feed always empty (akill)
#39960: [Mediacast] Bildergalerie: Lernfortschritt wird nicht festgehalten (akill)
#38049: [Membership] Cronjob "Tägliche Mail über Neuigkeiten aus Gruppen und Kursen" wirft Fehler (akill)
#36682: [Metadata + ADT] Copyright: Status "Outdated" für "All rights reserved" wirkungslos (tschmitz)
#36683: [Metadata + ADT] Zeilenauswahl an Usages einer Copyright-Vorgabe ist ohne Funktion. (tschmitz)
#36689: [News] Einstellungen des "Neuigkeiten"-Blocks auf dem Dashboard werden nicht gespeichert (akill)
#38058: [News] Permission "Add News" not working (akill)
#38670: [Notes] Counter displays notes, but you cannot find them (akill)
#40049: [Organisational Units] Failed test: Give a user permission to add and manage new user using Local User Administration (skergomard)
#27064: [Personal and Shared Resources (aka 'My Workspace')] Tool "Ordner" (ggf. "Ressourcen") bleibt bei anderen Tabs bestehen (akill)
#40261: [RBAC] Adminstator-Konto kann nicht auf Benutzerkonto zugreifen. (skergomard)
#40321: [RBAC] Failed test: Rechte kopieren in andere Rolle (skergomard)
#38261: [SCORM Online Editor] Beim Öffnen eines SCORM-Lernmoduls wird ein sofort ein Fehler geworfen (akill)
#37985: [Style – Content Style] Tabellen-Templates in Content-Styles lassen sich nicht bearbeiten (akill)
#36560: [Survey] "Remove all Participants": Desired behaviour? (akill)
#37718: [Survey] Suggested changes to placeholder option in 'Seperate E-Mail for Each Finished Survey' (akill)
#38645: [Survey] Click on survey opens results-tab (akill)
#39515: [Survey] "Neutrale Spalte" bei der Matrixfrage wird nicht gespeichert (akill)
#37739: [Test & Assessment] Rückmeldung bei Formelfrage -> richtige Lösung wird bei 2maligem Klicken auf "Prüfen" in das Eingabefeld eingetragen (skergomard)
#39490: [Test & Assessment] Failed test: Detaillierte Testergebnisse aktivieren und einsehen (skergomard)
#39798: [Test & Assessment] Failed test: Lückentext-Frage erstellen (leere Antwortoptionen) (skergomard)
#39949: [Test & Assessment] Leerzeichen am Wortende wird nicht herausgefiltert, Auswertung der Lückentextfrage fehlerhaft (u.kunze)
#40067: [Test & Assessment] Build /artifacts/ctrl_structure failed with " [ERROR] Invalid body indentation level (expecting an indentation level of at leas" (skergomard)
#40149: [Test & Assessment] Failed test: Verschiedene Zustände des Lernfortschritts (Test muss bestanden werden) (skergomard)
#40244: [Test & Assessment] Failed test: Antwort Statistik für bestehende Durchlaufergebnisse (skergomard)
#40252: [Test & Assessment] Failed test: Jeden Fragentyp in der Listenansicht hinzufügen (skergomard)
#40420: [Test & Assessment] Redirect after completing the test does not work - the target URL cannot be saved (maxbecker)
#40421: [Test & Assessment] Wrong Calculation of scoring (maxbecker)
#40290: [User Service] User/ImportParser: User attributes will be overwritten if XML tags/elements are absent for a user but were given for prior users (skergomard)
#40498: [User Service] ilUser error in user administration (skergomard)
#35122: [Weblink] Failed test: Weblink aus gleicher ILIAS-Version importieren (tschmitz)
#40285: [Weblink] Custom icons and images are not displayed (fschmid)
#39147: [Who is online?] Failed test: Freigegebene Ressourcen einsehen (akill)
#39163: [Who is online?] Failed test: Benutzer hat in einer Gruppe Rechte in der Mitgliederverwaltung (akill)
#38086: [Wiki] Notification mail about changed wiki page contains sometimes code (akill)
#39630: [¥ GlobalCache] ILIAS inaccassible after activating memcached (fschmid)
#38214: [¥ Object] "Open in a New Tab" doesn't work when Tiles are activated (skergomard)
#39933: [¥ Object] Tiles cannot be sorted within an object block (akill)
#40489: [¥ Web Access Checker] info tab of course leads to error (fschmid)