...
| Info |
|---|
MyTimetable 3.6 is currently in the state: stable. Some bug fixes or small features may be added, but development of significant new features has completed. We recommend customers to upgrade to this versiondeprecated. No further development is expected except for critical bug fixes. MyTimetable 3.6 is tracked using the git branch |
...
- Insecure iCalendar feed requests redirected to HTTPS — When requesting an iCalendar feed over an insecure channel, a permanent HTTP redirect is used to redirect users to a secure URL. Apple Calendar and iPhone clients will continue to use this secure URL in the future. If customers want to force users of other applications to update their URLs, this redirect can be disabled. As that requires action from all users (in some instances more than 50% of the users), we decided to leave this redirect in place by default.
- Replaced automatic (
webcal://-based) iCalendar feed dialogs with manual instructions — The 'automatic' iCalendar additions used awebcal://-'protocol handler'. This uses the insecure HTTP protocol underneath, and for that reason we have removed these dialogs. The dialogs have been replaced with manual instructions on adding the iCalendar feeds to the various applications.
- Added iCal-export options for Outlook.com and Office 365 — Outlook.com and Office 365 do support automatic addition of secure iCalendar feeds, and we have added dialogs for these applications.
- Updated help page — The help page has been updated to reflect the new iCalendar connection methods. The Excel export was also added to this page.
- Removed alarm support in iCalendar feeds — Most, if not all, clients ignore any alarms in iCalendar feeds. To avoid any confusion and to make the iCalendar dialogs clearer, we have removed the alarm support from the feeds.
- Event type added to title of iCalendar events (optional) — MyTimetable can now add the event type to the title of iCalendar events. This is an optional, global setting.
...
- HSTS header added — All secure requests will now include a HTTP Strict Transport Security header requesting the browser to only use secure connections and never use insecure connections. This prevents 'SSL-stripping' and other man-in-the-middle attacks. The header includes a lifetime of 1 year by default. If, for any reason, a customer wishes to use their MyTimetable domain with insecure connections in the future, this header should be disabled.
- Improved Office 365 / Exchange / Google Calendar removed user handling — Synchronisations of users that were removed are now correctly disabled.
- Google Calendar API update — Synchronisations are now using the new Google Calendar batch API. The old API will function until the beginning of 2019.
- Database performance updates — The Syllabus Plus data provider now uses fixed batch sizes, to improve query plan caching.
- Dependency upgrades:
- GWT (2.8.2)
...