Safe Exam Browser 3.2.1

SEB 3.2.1 Improves the optional support for SEB Server and adds many stability improvements.

• Fixed: Force Click lookup was working in the modern WebView.
• Fixed red lock screen after user switch disappeared without user action.
• Latest TeamViewer version wasn't blocked by default.
• Added fix for a possible crash when closing a temporary browser window while not running on the main thread.
• Improved logging verbosity, to prevent log files to be full of repeating log events.
• Added macOS 13 Ventura as option for minimum macOS version.

Optional features which need to be individually configured and are disabled by default

• Massively improved error handling when connecting to SEB Server with better error messages which can help SEB Server and exam administrators to fix server-side issues.
• Added support for fallback option, when connecting to SEB Server fails completely. In that case, an alternative start URL can be configured and fallback optionally protected with a new password.
• Improved sending log events, to prevent loosing single events due to temporary connectivity issues.
• Now sending device info to SEB Server earlier in the connection process.
• Renew expired SEB Server OAuth token.
• Fixed cleaning up of pending requests to SEB Server.
• Fixed missing pingInterval SEB Server connection setting caused pings being send continuously and SEB crashing after a while.

Note: This version does NOT contain the Zoom integration for exam proctoring or exam support which was contained in SEB 3.2rc. There is a non-public SEB Alliance Edition, which continues to support Zoom integration. If you are interested to use this Zoom integration, contact alliance@safeexambrowser.org.

Safe Exam Browser 3.1.1

SEB 3.1.1 for macOS solves various issues, supports screen sharing for web applications and improves support for the AAC Assessment (kiosk/lockdown) Mode.

New in 3.1.1:

• SEB should download PDF file instead of displaying it, when a "download" attribute or "Content-Disposition" header with attachment filename is present.
• Display correct error message when downloading is disabled and attempting to download website generated files.
• Fixed default and optional values for minimum macOS and iOS versions and iOS beta version.
• Removed string "/response" when asking for quit/unlock password in lock screens.
• Fixed missing German localization of one sentence.
• New settings browserMediaCaptureCamera and browserMediaCaptureMicrophone (Preferences / Browser / Allow camera/microphone capture) for controlling browser access to camera/microphone (WebRTC or still pictures/audio recording). If these settings are enabled, users will be asked to grant access to camera/microphone for SEB before the according (exam) session is started. This prevents that these permission dialogs weren't displayed when the AAC Assessment kiosk mode was used. In macOS 12/iOS 15 or later disabling these settings prevents web applications from accessing camera/microphone in any case.
• Fixed AAC Assessment Mode availability check according to feedback from Apple that AAC works without DNS pre-pinning only on macOS 12.1 or newer (and probably on macOS Catalina 10.15.4 and >=10.15.6.
• Added DNS pre-pinning when using AAC on macOS <12.1, according to new setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning). SEB will then resolve all domains from settings Start URL and URL filter Allow rules before activating AAC (as in macOS <12.1 DNS lookup doesn't work). You can define allow rules and if you don't actually need URL filtering deactivate it afterwards (Preferences / Network / Activate URL filtering) or deactivate single URL filter rules with its Active property. To ensure that DNS lookup works for your web application, you need to add all domains and subdomains as Allow filter rules (don't forget for example domains which are contacted for single-sign-on). Note: Without activating the setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning), AAC will only be used on macOS Catalina 10.15.4 and >=10.15.6 and macOS Monterey 12.1 or newer (not on macOS Big Sur 11.0 - Monterey 12.0). If you want to enforce the use of AAC on all these systems, you either need to use the Use AAC with DNS pre-pinning setting or enforce that only macOS 12.1 or newer is used (Preferences / Security / Allow running from macOS version / Check full macOS version number / enter 12 for Major version number and 1 for Minor version number).
• Now supporting full screen for web videos, but because of macOS limitations this only works with modern WebView and the AAC Assessment Mode (not the default SEB kiosk mode). If you cannot enforce using AAC, you have to implement a pseudo full screen display (enlarging video to the full browser window) in your web application.
• Fixed Javascript window.open() didn't return window object.
• Fixed setting allowDownUploads wasn't updated from client config when starting with seb(s) settings. In that case "Download not allowed" is displayed even if exam settings have downloads allowed.
• Improved user interface on MacBook Pro with camera notch (bump).
• Support for getDisplayMedia() API for WebRTC screen sharing when running on macOS 11 Big Sur, macOS 12 Monterey or macOS 13 Ventura Beta 4 or later. Requires new setting browserMediaCaptureScreen = true (default value is false).
• Fixed iFrame contents not displayed.
• Fixed media continues to play after the originating browser tab is closed in modern WebView.
• Fixed error when connecting to SEB Server (optional, needs to be configured individually) and the "expires_in" attribute in the Oauth token response is missing. Added proper optionality to other attributes in this token response JSON.

Safe Exam Browser 3.1

SEB 3.1 adds support for accessibility/VoiceOver, text search in browser windows, optional support for SEB Server and many stability improvements.

• Implemented accessibility support using VoiceOver and tabulator keyboard navigation (if keyboard navigation in System Preferences/Keyboard/Shortcuts is activated).
• Added new setting Preferences / Browser / "Tab focuses links" (key tabFocusesLinks, enabled by default) to allow to use tabulator key to move between links and controls on a web page.
• Improved accessibility in Preferences: Fixed tabbing to controls only worked in first preferences pane displayed. Fixed tab order of some buttons in Config pane.
• Refactored SEB Javascript API to update the SafeExamBrowser.security.browserExamKey and security.configKey variables directly when loading a web page, without having to call the security.updateKeys(callback) function.
• Added a custom reload() method to the SEB macOS WKWebView, so that the BEK/CK variables are set correctly also after a reload of a web page.
• Now updateKeys() can also be called without a callback method.
• Now supporting page zoom with pinch-to-zoom on a Mac trackpad (when using modern WebView and page zoom is enabled in SEB settings).
• Added settings for default page level (defaultPageZoomLevel) and default text zoom level (defaultTextZoomLevel) in Preferences / User Interface. Now also limiting zoom to predefined minimum and maximum levels. These settings currently only work in the modern WebView.
• Added new macOS 12/iOS 15 API to prevent the repeatedly displayed WebRTC permissions dialog for a website to use camera/microphone access.
• Added text search for web pages: Use the search icon in the browser window toolbar or cmd-F. This feature is not available in the full screen mode main window. Search in PDFs works only in modern WebView and macOS >=11 / iOS >= 14.
• Added preset prohibited process for Universal Control.
• Added missing SEB for Windows (3.3.2) settings to Preferences.
• Added basic settings for SEB Server to Preferences / General.
• Added automatic reload when web content process terminated in modern WebView.
• Added separate macOS setting for allowing right mouse click: Preferences / Browser / Enable right mouse, key enableRightMouseMac.
• Implemented Javascript text input panel (see issue #163 ).
• Fixed clearing cookies and web cashes etc. when quitting SEB.
• Now logging macOS version in SEB logs.
• Changed log level of very repetitive events to Verbose, to improve usefulness of logs when using SEB Server.
• Fixed starting SEB with exam configuration when client settings are secure (have a quit password set).
• Fixed keyboard shortcuts and menu bar menu items for reload and page/text zoom.
• Removed/updated SEB Win 2.x settings in Browser pane (Allow video/audio capture), User Interface pane ("Enable touch exit (Win)",
  "Zoom mode Win (Ctrl-Mousewheel)") and Security pane / Hooked Keys (Enable right mouse now only for Win).
• Updated text (and tool tip) for SEB Win 2.x settings "Remote profile (Win" in Browser pane to "Clear cache (Win)".
• Fixed conditional reload button display, reload warning and navigation settings.
• Fixed web page title/URL wasn't updated after reload in modern WebView.
• Now supporting the settings browserWindowShowURL/newBrowserWindowShowURL = browserWindowShowURLAlways also in SEB for macOS.
• Fixed: SEB attempts to download PDF file instead of displaying it.
• Fixed: Session cookies not persisted in Moodle from webpage in WKWebView to downloading config to page in WKWebView.
• Fixed another rare case of session cookies not persisted in Moodle from webpage with WKWebView to another page with WKWebView.
• Attempt to fix SEBOSXWKWebViewController didReceiveAuthenticationChallenge randomly crashes on Apple Silicon (see issue #176 ).
• Updated alert text to "Force Quit window or another system frontmost dialog".
• Safe Exam Browser Xcode build Scheme (macOS) is now set to "shared" and contained in the repository.
• Fixed: Opening downloaded files doesn't work.
• No longer transferring session cookies with same name and domain from NSHTTPCookieStorage to WKWebView httpCookieStore.
• Fixed: Downloads didn't work.
• Fixed PDF files with "download" tag parameter were not downloaded but displayed in modern WebView.
• If downloading is disabled, PDF files with "download" tag parameter are displayed in a new browser window (and their file name is used as webpage/window title).
• Fixed setting "download and open PDF files instead of displaying" didn't open downloaded PDF.
• Fixed determining filenames which contain a space from "Content-Disposition" "attachment; filename="..."
• Fixed PDF files which should be downloaded ("download" tag parameter) might not have been recognized.
• Fixed saving paths of downloaded files for automatically choosing files for upload.
• Fixed: Settings Preferences / Browser / "Enable JavaScript" and "Block pop-up windows" in modern WebView.
• Fixed: (Apple) Messages app set as prohibited process is not quit by SEB.
• Fixed: Time is truncated in SEB dock/taskbar when changing dock size for various dock sizes.
• Fixed: SEB crashes when restarting while using full screen mode.
• Fixed: Spellchecking not disabled in Moodle rich-text editor when using WKWebView.
• Fixed: Legacy screen shot blocking not working.
• Opted-out of Dark Mode in SEB for macOS.
• Fixed: Copy-paste into text fields in Preferences window doesn't work.
• Fixed: Paste from saved clipboard doesn't work when SEB is started with held option/alt key (to directly open the Preferences window).
• SEB crashes when opening file upload dialogue: Fixed and added alert for uploading/downloading not allowed.
• Fixed: Content-Disposition 'inline; ' interpreted as 'attachment; filename=...'
• Fixed: Load error in WKWebView (at least for startURL) is not displayed.
• Now stopping media playback when closing tab or quitting session (incl. fullscreen and PiP) in modern WebView (WKWebView) also when running on macOS 11.3 or newer.
• "Prohibited Process Locked SEB" doesn't show process name/URL: Now process name and appURL information should always be displayed if it was available.
• Attempting to fix unnecessarily displayed lock screen for process couldn't be terminated.
• Added additional preset default prohibited process for AnyDesk.
• Fixed toolbar Reload button width in older macOS versions.

Optional features which need to be individually configured and are disabled by default

• Support for lock screen notifications when connected to SEB Server. The notification is displayed with a bell symbol in front of the user name in the Running Exam monitoring view. Clicking the user name shows the error message which invoked a lock screen.
• Lock screens can be unlocked from SEB Server (without having to communicate the Quit/Unlock password to students). Note that you have to confirm all pending lock screen notifications for a user if there are several before the lock screen closes.
• Now sending computer/environment information to SEB Server (ONLY when connecting to an SEB Server instance is configured in individual settings): Local short user/account name, operating system version and device type (iPhone, iPad, iPod Touch), SEB version and machine name.
• Now supporting battery monitoring by SEB Server.
• Prevent reconfiguring an SEB Server exam with an exam config containing SEB Server connection settings.
• Fixed implementation of general integration approach to receive the user identifier from an LMS and finish the handshake with SEB Server (currently supported by development versions of OpenOLAT and Ans).
• Implemented workaround for receiving Moodle user identifier when using a SSO system like AAI/Shibboleth (requires a special Moodle PHP script, temporary solution until the full SEB Server integration for Moodle is implemented).

Safe Exam Browser 3.0

SEB 3.0 for macOS is a major update, supporting the modern WebKit browser engine and access to camera/microphone via WebRTC.

• Support for the modern WebKit browser engine (WKWebView), which increases performance, stability and compatibility with web applications.

• Access to camera/microphone (getUserMedia Web API) via WebRTC on macOS 11.1 Big Sur and newer. You can use web-based video conferencing and remote proctoring solutions, as long as the requirements explained below are met, so that SEB can use the modern WebView. Note: Apple currently doesn't support getDisplayMedia in WKWebView for screen sharing.

• Due to refactored code using newer APIs, SEB 3.0 requires macOS 10.11 or later. We recommend to only use macOS versions which still receive security updates from Apple (the three most recent, currently macOS 10.14, 10.15 and 11).

• When using the modern WebKit browser engine (WKWebView), SEB currently doesn't support URL content filters (only URL filters for links and page loading) and sending the Config Key and Browser Exam Key in HTTP headers (the latter feature will not be possible with WKWebView at all, so you will need to transition to the SEB JavaScript API in your web applications, see the developer documentation). If one of the settings sendBrowserExamKey=true or URLFilterEnableContentFilter=true is enabled, the classic WebView is used depending on the new setting Preferences/ Browser/"Select Browser Engine Policy" (key browserWindowWebView), "Prefer Modern in New Tab+Different Host" (value 2), ensures that you still can use testing systems/LMS like Moodle which use the Browser Exam/Config Key test for SEB connecting to the exam (as they open in the classic WebView), but webpages opened in new tabs, which have another host than the exam system, open in WKWebView.

• Support for the new SEB JavaScript API for easier integration into exam solutions (currently for querying app version details, ConfigKey and BrowserExamKey security elements).

• Support for restart session (Preferences/Exam/Link to quit SEB after exam/Restart instead of quitting) and quit SEB/session features, which are mostly interesting for managed Macs and kiosk environments: If client settings are secure (have a quit password set), SEB was not started with a seb(s) link or .seb file and an exam session is quit, SEB is not quit (terminated), but only the exam session (SEB is restarted with client settings).

• Fixes security issue with "Revert to Client Settings" and "Configure Client" in Preferences window.

• Private Clipboard is also supported when using the modern WebView (WKWebView) and working with commands in menu bar / Edit.

• Added setting in Preferences / Security (allowMacOSVersionNumberCheckFull) for full control about minimal allowed macOS version (major/minor/patch version numbers, keys allowMacOSVersionNumberMajor/ allowMacOSVersionNumberMinor/ allowMacOSVersionNumberPatch).

• Fixed issue with setting Preferences / Security / Enforce minimal macOS version.

• Again asking for Admin password when settings aren't encrypted.

• Use AAC kiosk mode only on macOS 15.4+ and 11.4+ (except 11.0 - 11.3, as there was an issue with DNS lookup. This caused pages with yet unknown domains to not load).

• No longer using AAC modal alert workaround on macOS 12 Monterey (as an issue causing application modal alerts to be invisible was fixed there).

• Page and text zoom now also fully work with WKWebView.

• Fixed repeated drag-and-drop onto Preferences window. Note: files in iCloud drive need to be downloaded first in Finder (cloud icon in list view) before they can be dragged-dropped.

• Fixed double toolbar icon for "General" pane when opening settings when the Preferences window already was open.

• Fixed check if reconfiguring is allowed when a .seb config file is opened while SEB is running already (considering the Exam / Allow Reconfiguring setting).

• Now also supporting gzip compressed, unencrypted .seb files.

• Updated Network / Filter / Teach URL Filter feature for modern WebView (WKWebView). Note: If content filtering is enabled, classic WebView is used.

• Fixed Teach URL Filter feature on macOS 11+ also for classic WebView.

• Setting to enable WebInspector (developer tools) and remote inspection (only when running a debug build) is now functional in WKWebView, although the "Inspect Element" context menu (right mouse click must be enabled in settings as well) doesn't work correctly with WKWebView.

Safe Exam Browser 2.3.2

SEB 2.3.2 is a minor update for 2.3.1 with one bug fix:

• When running on macOS 11 Big Sur on Intel CPU based Macs (tested on macOS 11.2.3), system processes displaying UI in the foreground were not recognized as system applications and terminated by SEB or locked SEB (displaying a red lock screen) if SEB couldn't terminate them. Now system processes should be identified correctly both on Intel and Apple Silicon based Macs.

Safe Exam Browser 2.3.1

SEB 2.3.1 is a maintenance update, which disables Automatic Assessment Configuration (AAC) macOS Assessment Mode in default settings, as it has a major issue when used on macOS 11 Big Sur. We recommend to not use AAC until this issue will be fixed in an upcoming macOS Big Sur update.

When running on macOS 11 Big Sur, DNS lookup fails while AAC is enabled. This is why SEB fails to load URLs with a different domain than the Start URL the first time it tries to connect to that URL. Usually it would connect to the according domain after quitting and starting SEB again (as the DNS lookup result is cached). The domain of the Start URL should always be loadable, as SEB reaches out to the Start URL before activating AAC.

• Changed default setting for AAC to disabled, using a new settings key enableMacOSAAC.

• Block screen capture also when AAC is used (as AAC currently doesn't prevent screen capture reliably).

• Fixed URL String from pasteboard to copy to Preferences/General/Start URL is not saved when SEB is started in AAC.

• Clicking the close button of the running prohibited processes list window now quits SEB/the exam session.

• Fixed force "Quit All Processes" alert was sometimes displayed behind process list window.

• Fixed security issue with "Revert to Client Settings" and "Configure Client" in Preferences: Don't ask for client settings admin password if it is empty (not set).

Safe Exam Browser 2.3

SEB 2.3 for macOS is a major update, which improves security massively by supporting the Automatic Assessment Configuration (AAC) macOS Assessment Mode, available from macOS 10.15.4. SEB 2.3 also adds new capabilities, improves the user interface for students and exam administrators and fixes several issues.

• Support for Automatic Assessment Configuration (AAC) macOS Assessment Mode. AAC is used by default if running on macOS 10.15.4 or newer. Assessment Mode blocks various macOS features which shouldn't be accessible during exams. Also no other applications and processes running in the background can access the network while Assessment Mode is active.

• Optionally, the old SEB kiosk mode can be used also on latest macOS versions (see Preferences / Security / "Use Assessment Mode (AAC) if available", settings key enableAAC), as AAC doesn't support optionally enabling features like like screen capture/sharing, Siri and Dictation. Assessment Mode also cannot be used if you want to run a video conferencing solution in the background during an exam for proctoring.

• New options to enforce using the internal (built-in) display of a MacBook or iMac but optionally still allowing to use the external display on a Mac without built-in display (Mac Mini, Mac Pro).

• Fixed an issue when calculating the Config Key for configuration files containing prohibited processes entries for both macOS and Windows.

• New battery indicator in the SEB Dock, automatically displayed on devices with battery when the macOS menu bar with its battery indicator is disabled. This specifically applies when using Assessment Mode, as then the menu bar is always hidden.

• Full compatibility with macOS 11 Big Sur.

• Native support for Apple Silicon (universal binary).

• Preferences window can be opened by holding the option/alt key when starting SEB (also when dropping a SEB configuration file onto the SEB icon).

• Fixed drag-and-drop of configuration files onto the Preferences window. Note that files in iCloud drive need to be downloaded first (click the cloud icon in Finder's list view).

• Added SEB 3.x for Windows settings to the Preferences window.

• Improved starting SEB by opening settings, fixed some related issues.

• Improved workaround for SEB freezing when a webpage tries to download a font.

Safe Exam Browser 2.2.2

This version is a maintenance update containing improvements and bug fixes:

• Fixed that PDF documents were not displayed when Acrobat PDF viewer is installed.
• Prevent Preferences window to be opened in Moodle 3.9 when using automatically generated settings (option "Configure manually"). SEB now uses the default setting allowPreferencesWindow=false in exam configurations (client configs still have allowPreferencesWindow=true as default setting).
• Fixed: Cannot start SEB by opening .seb file on macOS <= 10.12.
• Fixed false positive detection of not allowed process because of partial match of process executable name.
• Now controlling resizing of Preferences panels: Don't allow to resize those without scroll view and allow to resize the ones with scroll view only to the maximum size of their content.
• Now scrolling oversized Preferences panels to the top when displaying them the first time.
• Fixed User Interface Preferences Panel didn't resize vertically.
• Fixed missing error message when identity certificate to decrypt SEB config cannot be accessed.
• Attempted to fix (not always reproducible) checking code signature of some visible apps delays or blocks starting SEB.
• Added Discord to preset prohibited processes.

Safe Exam Browser 2.2.1

SEB 2.2.1 for macOS is a major update, improving security by blocking prohibited processes, adding new capabilities and offering full compatibility to enhanced integrations with learning management systems, like the one available in Moodle 3.9.

• Prohibited Processes settings for blocking specific processes and applications from running together with SEB.
• Preset prohibited processes covering communication, screen sharing and recording apps. Let us know if you would like to suggest applications and tools to be added to those preset prohibited processes (we need information about the software and its name and Bundle Identifier (if applicable).
• Added settings to allow to reconfigure SEB, even it is already running in a secure exam session.
• Implemented setting keys to control clearing cookies when starting/ending an exam session (examSessionClearCookiesOnStart / examSessionClearCookiesOnEnd). This can be used to keep users logged in from the previous session after an exam session was started (and SEB reconfigured with new settings).
• Added setting to enable Web Inspector (web developer tools) in Preferences/Browser (same settings key allowDeveloperConsole as in SEB for Windows 3.0. If enabled and right click isn't disabled (see Preferences/Security/Hooked Keys/Enable Right Mouse), you can right click/ctrl-left click on a web page element and open Web Inspector with 'Inspect Element'.
• Added Mac-specific settings for blocking screen shots and screen recording. The separate settings allow to run SEB correctly in parallel with some remote proctoring tools.
• Added separate Mac setting for the Private Clipboard feature.
• Added Mac-specific setting for blocking screen sharing over the network (VNC): key screenSharingMacEnforceBlocked (default: false, then the value of the existing key allowScreenSharing is used).
• Added all SEB for iOS settings in Preferences window.
• Fixed that a wrong Config Key was calculated because of specific new default settings added in a new SEB version. This was the cause why SEB 2.1.4 did not work correctly with the new SEB integration in Moodle 3.9.
• Fixed: Overriding check for specific processes in lock screen didn't work.
• Fixed: Client config encrypted with password wasn't compatible between Win vs. Mac+iOS.
• Fixed: Loading config file with different SEB admin password in Preferences didn't work.
• Fixed that an SEB config without proper MIME type wasn't recognized: Added "text/xml" as alternative MIME type for SEB config files when a seb(s) link is opened.
• Removed ARDAgent from detecting Remote Management: ARDAgent is running always when Remote Management is enabled in System Preferences / Sharing, which made it necessary to always disable Remote Management. Now this is not necessary, as long as no VNC client tries to connect to the SEB client (in that case the according red lock screen is displayed and requires the quit/unlock password to be entered).
• Removed setting for disabling Local Storage (in Browser pane). Local Storage is now always enabled.
• Replaced key string mobileShowSettings with string showSettingsInApp in default settings.

Fixed SEB 2.2 issues in SEB 2.2.1:

• Cannot open Moodle Deeper Integration quiz by starting SEB with indirect sebs:// link.
• Browser Exam and Config Key are not displayed correctly first time opening Preferences/Exams.
• Allow to load configs from indirect sebs:// Links regardless of URL filter in client settings.
• Embedded SSL debug certificate doesn't work with wildcard domains.

IMPORTANT: SEB 2.2.1 for macOS uses a different policy to decide if it can be reconfigured when a seb(s) URL is opened and a .seb config file downloaded: When running in Secure Mode (a quit password is set in the currently active settings), SEB 2.2.1 cannot be reconfigured, even if it's using the persisted client settings. Earlier versions could always be reconfigured when using client settings. If you want to allow reconfiguring SEB by opening a seb(s) URL while running in Secure Mode, then you need to use the "Allow Reconfiguring" and "Reconfiguring Config URL" options in Preferences/Exam Session. For the same behavior as in previous versions, you can enable "Allow Reconfiguring" and set "Reconfiguring Config URL" to "*" (wildcard symbol, meaning any seb(s) URL or download URL of a .seb config file is allowed to reconfigure SEB) in your SEB client settings. This policy settings for reconfiguring are already used by SEB for iOS and will also be introduced in SEB 3.1 for Windows.

Other changes could also require you to change your SEB settings:

• Preset prohibited processes are required to be quit before starting an exam and are automatically added to any config you open with SEB 2.2.1. This doesn't alter the Config Key hash. The Browser Exam Key hash value is changed, but that key you anyways have to determine by loading the according SEB config file in SEB 2.2.1 and copy-paste the key from the Preferences/Exam pane. You cannot remove those preset prohibited processes, but you can deactivate them individually using their "Active" parameter. See the Preferences/Applications/Prohibited Processes pane. You can change other properties of the prohibited process, although not all of these parameters are used by SEB for macOS, currently only "Active", "Executable", "Identifier", "OS", "Force quit" and "Description" are used. You can't change "Executable" or "Identifier", if you do so, a new prohibited process entry is created internally (and visible next time you open those settings). There are two kinds of processes: Applications with a Bundle Identifier, which follows the reverse domain notation (for example org.safeexambrowser.Safe-Exam-Browser). SEB uses the Identifier parameter to detect those Application processes. BSD processes don't have a Bundle Identifier, they are only detected using the Executable property (process name). If you want to add prohibited processes to your settings, you can use the Activity Monitor macOS app: Select a process, press the info button (or cmd-I) and press the "Sample" button. In the sample output, you can identify the process name (SEB property "Executable", which can differ from the localized application name displayed by macOS in the Finder, Dock and Activity Monitor process name list. If the sample shows an "Identifier" in reverse domain notation (and not the identical string as the "Process" entry), then this process is an application with a Bundle Identifier and you should enter this bundle ID as "Identifier" in SEB's settings if you create a prohibited process. If "Identifier" from the sample output isn't in reverse domain notation, don't enter anything in the "Identifier" field in SEB's prohibited process settings, only enter the process name in "Executable".
  Only enable the "Force quit" parameter for prohibited processes in SEB if you are sure that student's won't loose unsaved documents if the process is terminated without a warning when starting SEB. Usually "Force quit" should not be used with applications: When "Force quit" is disabled, SEB will send a regular quit command to the application. Most applications will then either auto-save unsaved changes in open documents or ask the user if the document should be saved before quitting.
  By default, when the SEB setting "Attempt to quit prohibited applications" (Preferences/Applications) is enabled, then SEB tries to quit all running prohibited applications in this "nice" way, allowing them to save changes to open documents. If you disable this setting, then the user first has to confirm SEB trying to quit those running prohibited applications even in this "nice" way.
  BSD processes cannot be "nicely" quit, users either have to manually quit or disable them or use the "Force Quit" button displayed in the list of running prohibited processes displayed when SEB is starting. Please note that macOS restarts some background (daemon) processes automatically if they are force terminated. Those processes might have to be uninstalled (or temporarily deactivated using the command line in Terminal, as explained in this external article).

• New separate Mac setting for the Private Clipboard feature, Preferences/Security/"Enforce private clipboard on Mac" (settings key enablePrivateClipboardMacEnforce), by default enabled. If enabled, then the private clipboard is used, even if the old setting Preferences/Security/"Use private clipboard" is disabled. The reason for the separate Mac setting is, that enabling private clipboard in the Windows version sometimes causes web compatibility issues (which isn't the case in the Mac version). If you intentionally disabled "Use private clipboard" (key enablePrivateClipboard=false) for the Mac version, then you have to set enablePrivateClipboardMacEnforce=false in addition.

• New separate SEB for macOS settings for allowing screen capture/recording, window capture and to use the legacy method for blocking screen shots. SEB 2.2.1 for macOS is no longer using the old setting "Enable screen capture" which corresponded with the setting "Enable Print Screen" in Windows. Instead, these new settings allow to control access to the screen while SEB is running in a gradual way. The new setting "Allow screen capture/recording" (key allowScreenCapture) controls a system process, which since macOS 10.14 Mojave is used for the macOS screen recording feature (cmd+shift+5) and for screen shots. The new setting "Allow window capture (screen shots)" (key allowWindowCapture) controls if other processes are able to read the contents of the windows displayed by SEB. Depending which system APIs are used to read window or screen contents, those settings have a different effect: If allowScreenCapture=true and allowWindowCapture=false, then macOS screen shots using cmd-shift-3 and -4 can still be taken, but don't show SEB's windows (only the desktop background). On screen recording videos taken with cmd-shift-...

Safe Exam Browser 2.2

SEB 2.2 for macOS is a major update, improving security by blocking prohibited processes, adding new capabilities and offering full compatibility to enhanced integrations with learning management systems, like the one available in Moodle 3.9.

• Prohibited Processes settings for blocking specific processes and applications from running together with SEB.
• Preset prohibited processes covering communication, screen sharing and recording apps. Let us know if you would like to suggest applications and tools to be added to those preset prohibited processes (we need information about the software and its name and Bundle Identifier (if applicable).
• Added settings to allow to reconfigure SEB, even it is already running in a secure exam session.
• Implemented setting keys to control clearing cookies when starting/ending an exam session (examSessionClearCookiesOnStart / examSessionClearCookiesOnEnd). This can be used to keep users logged in from the previous session after an exam session was started (and SEB reconfigured with new settings).
• Added setting to enable Web Inspector (web developer tools) in Preferences/Browser (same settings key allowDeveloperConsole as in SEB for Windows 3.0. If enabled and right click isn't disabled (see Preferences/Security/Hooked Keys/Enable Right Mouse), you can right click/ctrl-left click on a web page element and open Web Inspector with 'Inspect Element'.
• Added Mac-specific settings for blocking screen shots and screen recording. The separate settings allow to run SEB correctly in parallel with some remote proctoring tools.
• Added separate Mac setting for the Private Clipboard feature.
• Added Mac-specific setting for blocking screen sharing over the network (VNC): key screenSharingMacEnforceBlocked (default: false, then the value of the existing key allowScreenSharing is used).
• Added all SEB for iOS settings in Preferences window.
• Fixed that a wrong Config Key was calculated because of specific new default settings added in a new SEB version. This was the cause why SEB 2.1.4 did not work correctly with the new SEB integration in Moodle 3.9.
• Fixed: Overriding check for specific processes in lock screen didn't work.
• Fixed: Client config encrypted with password wasn't compatible between Win vs. Mac+iOS.
• Fixed: Loading config file with different SEB admin password in Preferences didn't work.
• Fixed that an SEB config without proper MIME type wasn't recognized: Added "text/xml" as alternative MIME type for SEB config files when a seb(s) link is opened.
• Removed ARDAgent from detecting Remote Management: ARDAgent is running always when Remote Management is enabled in System Preferences / Sharing, which made it necessary to always disable Remote Management. Now this is not necessary, as long as no VNC client tries to connect to the SEB client (in that case the according red lock screen is displayed and requires the quit/unlock password to be entered).
• Removed setting for disabling Local Storage (in Browser pane). Local Storage is now always enabled.
• Replaced key string mobileShowSettings with string showSettingsInApp in default settings.