From d12c58367cb8e7d13beebfc5ccb30f69f4297de3 Mon Sep 17 00:00:00 2001 From: anhefti Date: Thu, 27 Oct 2022 09:31:06 +0200 Subject: [PATCH] SEBSERV-342 added newest webSDK version and cross origin headers https://devsupport.zoom.us/hc/en-us/articles/360060333111-How-to-embed-Zoom-into-a-website --- .../ch/ethz/seb/sebserver/gui/RAPConfiguration.java | 10 +++++++--- src/main/resources/config/application-gui.properties | 2 +- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/src/main/java/ch/ethz/seb/sebserver/gui/RAPConfiguration.java b/src/main/java/ch/ethz/seb/sebserver/gui/RAPConfiguration.java index 9550f29f..5dd022ca 100644 --- a/src/main/java/ch/ethz/seb/sebserver/gui/RAPConfiguration.java +++ b/src/main/java/ch/ethz/seb/sebserver/gui/RAPConfiguration.java @@ -136,10 +136,14 @@ public class RAPConfiguration implements ApplicationConfiguration { } } + // https://developer.chrome.com/blog/enabling-shared-array-buffer/#cross-origin-isolation public static final void setCORS(final HttpServletResponse resp) { - resp.addHeader("Access-Control-Allow-Origin", "*"); - resp.setHeader("Access-Control-Allow-Methods", "GET"); - resp.setHeader("Vary", "Origin"); +// resp.addHeader("Access-Control-Allow-Origin", "*"); +// resp.setHeader("Access-Control-Allow-Methods", "GET"); +// resp.setHeader("Vary", "Origin"); + + resp.addHeader("Cross-Origin-Embedder-Policy", "require-corp"); + resp.addHeader("Cross-Origin-Opener-Policy", "same-origin"); } public static final class RAPSpringEntryPointFactory implements EntryPointFactory { diff --git a/src/main/resources/config/application-gui.properties b/src/main/resources/config/application-gui.properties index 25465c53..300bc489 100644 --- a/src/main/resources/config/application-gui.properties +++ b/src/main/resources/config/application-gui.properties @@ -38,7 +38,7 @@ sebserver.gui.webservice.edx-lms-enabled=true sebserver.gui.webservice.moodle-lms-enabled=true sebserver.gui.seb.client.config.download.filename=SEBServerSettings.seb sebserver.gui.seb.exam.config.download.filename=SEBExamSettings.seb -sebserver.gui.proctoring.zoom.websdk.version=1.9.8 +sebserver.gui.proctoring.zoom.websdk.version=2.8.0 sebserver.gui.filter.date.from.years=2 # remote proctoring