ILLiad 9.2 Release Notes

Fixed an issue where the lender was not imported into the Lending String field when submitting requests in DOCLINE.

Added functionality to the Web Platform's Create Transaction API endpoint that allows transactions to be created for a user using an external user ID if the ILLiad username is not available in the external integrating system. For more information, see The ILLiad Web Platform API. 

Updated the AtlasPDF tool used by the Odyssey Manager to v1.1.3. This version updates the log4net component used by the tool to v2.0.14 in order to fix an issue causing crashes.

Updated the embedded browser used by the OCLC Policies Directory to Chromium in order to fix several formatting and display issues. In addition to fixing these issues, the new browser will also implement the following changes:

• Any links clicked within the Policies Directory screen will open up in an external window in the default web browser for the machine.
• Email links will no longer open in the machine's default email application when clicked. Email addresses must now be manually copied and pasted directly into the external email application to initiate an email. 

Removed the Ribbon Display Options button that was located next to the Minimize button on the main application window of the ILLiad Client.

Fixed an issue that prevented custom searching on the OCLC and Z39.50 tabs of the ILLiad Request form.

Fixed an issue that prevented importing for Borrowing and Lending requests in the DOCLINE interface if the FieldTranslation.xml and LendingFieldTranslation.xml files were not found in the old DOCLINE install path (C:\Program Files (x86)\ILLiad\Docline\). The ILLiad Client will now read those files from the new installation location (C:\ProgramData\ILLiad\Docline\). 

Fixed an issue where request text was not added to the Imported Request tab on the ILLiad Request form when importing DOCLINE Lending requests.

Fixed an issue where error details would not be properly displayed on the screen when a DOCLINE order failed to be placed.

Fixed various accessibility and other issues on the web pages to improve the user experience and address several bugs. The list of changes can be found below. For more information on implementing each fix, see Implementing 9.2 Web Page Changes. 

• Added custom focus indicators and new underline behavior for hyperlinks to address color contrast issues 
• Changed the default title of the first-time user registration page (FirstTime.html) to differentiate it from the logon pages 
• Changed the default color of the "No search results" message on the search results web page to fix contrast issues with the default background color. Bug #17644
• Added missing "(required)" labels to several fields marked as required by default in the ILLiad Customization Manager's WebValidation table. Bug #17645
• Added borders to all buttons to address color contrast issues 
• Added custom focus indicators for input fields and buttons and added an outline to form fields to address color contrast issues Bug #17641
• Fixed an issue where users on some mobile devices were not able to zoom in and out of the web pages. Bug# 16529
• Fixed accessibility issues caused by the "All" and "None" buttons used to set notification preferences within the include_notification_prefences.html file. Bug# 16533
• Fixed an issue where certain buttons used in the DataRow template files could not be activated using keyboard controls 
• Removed tooltips from the DataRow template files that did not meet accessibility requirements 
• Fixed an accessibility issue caused by the "Actions" button on DataRow_ElectronicDelivery.html
• Fixed an issue where the cookie notification popup could not be dismissed using keyboard controls Bug# 16945
• Added a missing space between the Transaction Number and Due Date field labels and their respective values on several DataRow template files
• Added an error page (Error.html) to the Lending web directory to ensure this page is displayed to users encountering errors on the Lending web pages

Fixed formatting and contrast issues for the radio buttons and search box on the search web pages (ViewSearchResults.html and LendingViewSearchResults.html). Bug# 13557

Removed unnecessary hidden inputs from various web forms to enhance security and improve the efficiency of the code on these pages.

Changed the page header on NewAuthRegistration.html to better reflect the purpose of the web page.

Updated the signing certificate used by the application to fix an issue that prevented the SQL Alias Manager from opening.

Fixed an issue where DOCLINE lending requests would not import into ILLiad after the DOCLINE 6.2.41 update.

Fixed an existing issue where requests from each service level were not all imported after using the Import All button.

Changed the default mail merge method used by the ILLiad Client to fix an issue where attempting to print after updating to Microsoft Word version 2211 or above could potentially return an error stating "The OpenDataSource method or property is not available because a macro is currently running."

The following new configuration options are available for the ILLiad web interface to prevent bot-driven spam account creation via the New User Registration forms (NewUserRegistration.html and LendingNewUserRegistration.html):

• ILLiad can now integrate with one of three supported third-party captcha providers to add a captcha challenge requirement to the New User Registration forms (NewUserRegistration.html and LendingNewUserRegistration.html). The captcha challenge will provide extra security against bot-driven account creation by requiring new users to solve the challenge in order to submit the form and create their accounts. The following captcha providers and plans are supported by ILLiad (note that a separate account must be created with your chosen captcha provider to implement this feature): 

  • Google reCAPTCHA: reCAPTCHA v2 (both the "invisible" and "checkbox" variants) and reCAPTCHA v3
    • Note that reCAPTCHA Enterprise is not supported by ILLiad
  • hCaptcha: Free "Publisher" plan
  • MTCaptcha: Free plan
• As an alternative to implementing the captcha requirement, user registration can now be completely disabled for accounts created through basic ILLiad authentication (ILLiadAuth) from the New User Registration forms (NewUserRegistration.html and LendingNewUserRegistration.html) using the new ILLiadAuthUserRegistrationEnabled customization key. This option will prevent the creation of spam accounts by completely blocking account creation for users who are not pre-authorized for an ILLiad account via an ILLiad Exclusive, LDAP, PatronAPI, SymphonyAPI, or Remote Authentication configuration. This option should not be chosen if you only allow users to register for accounts through the basic ILLiad account creation and authentication process.

Added the following new customization keys to the ILLiad Customization Manager to support the new bot-driven spam account prevention options:

• ILLiadAuthUserRegistrationEnabled: Determines if new user registrations can be created via basic ILLiad authentication (ILLiadAuth)
• SLUserRegistrationDisabled: The web status line that appears if registration has been disabled using the ILLiadAuthUserRegistrationEnabled key
• CaptchaProvider, CaptchaSecret, CaptchaSiteID: These keys are used to configure the captcha integration for the user registration form
• SLCaptchaFailure: The web status line that appears if a user fails the CAPTCHA challenge during user registration.

Added the CAPTCHA web DLL tag to the ILLiad web interface. This tag is used to display the captcha challenge requirement on the New User Registration form (NewUserRegistration.html) and Lending New User Registration form (LendingNewUserRegistration.html) when a captcha integration has been configured in the ILLiad Customization Manager. 

Added a WebCookieSameSite customization key to the ILLiad Customization Manager under Web Interface | System that will set the SameSite property value on the session ID cookie that is generated in the user's web browser on login to the ILLiad web interface. Valid options are None, Lax, and Strict.

Users will no longer be able to register for an ILLiad account from the TestWeb directory to prevent bot-driven spam account creation from the ILLiad TestWeb web pages. User registration will be disabled by default for the web pages in the TestWeb directory upon update and cannot be re-enabled.

Expanded the maximum length of the AuthUser and AuthPass fields in the ZServerConfig database table to 100 characters. These fields display as the Username and Password fields on Z39.50 server configuration form in the ILLiad Customization Manager.

The ILLiad Connection Manager will now add a note to the ILLiad request if the lending string on the ILLiad request is modified when sending the request to OCLC (e.g., in the case that a symbol was removed because the lender is a non-supplier or because the symbol is invalid). The note will include detailed information about which lending symbols were modified/removed for troubleshooting purposes.

Fixed a security vulnerability present in the ILLiad Connection Manager.

Modified NewUserRegistration.html to include the new <CAPTCHA> tag and added the following new files to the default web pages to implement captcha support on the New User Registration form:

• include_captcha_none.html
• include_hcaptcha.html
• include_mtcaptcha.html
• include_recaptcha_v2_checkbox.html
• include_recaptcha_v2_invisible.html
• include_recaptcha_v3.html

Removed the unused and deprecated Lending\js\userNotificationPreferences.js file from the default Lending web pages. Bug# 18086

Updated the hardcoded copyright year on the web pages to 2023.

Changed the default colors used for hyperlinks added to the cookie consent banner (Bug# 18485), web alert titles (Bug# 18774), and fields that fail server validation when a form is submitted (Bug# 18767) to address contrast issues against the default web page background colors.

Reordered the list of stylesheet links contained in include_head.html to improve the consistency of the code within this file.

Fixed an issue where tracking entries for requests on the ILLiad web pages were not converted to the local timezone and would sometimes display at a different time than what was shown in the ILLiad Client. Bug# 20739

Corrected outdated information on the Borrowing and Lending FAQ pages regarding web browser and cookie requirements for using the ILLiad web pages. Bug# 18265

Fixed several issues affecting the modal dialog used for web alerts:

• Added a missing 'type' attribute to the Close buttons to ensure that they always work as expected
• Fixed a broken 'aria-labelledby' attribute causing an accessibility issue (Bug# 18775)

Fixed improperly formatted label elements on the Lending web pages that prevented some fields from being read out to screen reader users. Bug# 20405

Realigned the Actions menu dropdown options contained in the DataRow template files to fix an issue where this menu was not fully visible on smaller display sizes. Bug# 18916

Fixed several issues affecting the transaction menu (include_TransactionMenu.html):

• Fixed an issue where the menu was not fully visible on smaller display sizes and contained inconsistently formatted buttons Bug# 17956/Bug# 18918
• Added an underline on hover to its enabled menu buttons for better consistency with other buttons on the ILLiad web pages

Updated the JavaScript used in the ILLiad web pages to persist a user's previously selected values in dropdown menus, radio buttons, and checkboxes to resolve the following issues:

• Fixed an issue where the search type checkbox toggle switch that is hidden by default on the search web pages (ViewSearchResults.html and LendingViewSearchResults.html) would not correctly filter search results to include active requests only when enabled Bug# 19970
• Fixed an issue where values would not persist properly on the web pages when using Safari or other WebKit-based web browsers Bug# 14597

Fixed an issue where some small notes attached to fields on web forms were not read automatically by screen readers and also removed unused 'aria-describedby' attributes causing accessibility issues on the Change Password web pages (ChangePassword.html and LendingChangePassword.html). Bug# 19935

Added support for the new Chromium-based Microsoft Edge WebView2 embedded browser within the ILLiad Client and Client addons. Support for the WebView2 browser will include the following enhancements:

• Easier updating process: The WebView2 browser is updated via the Windows Update process on your local machine, removing the need to update the version of the browser used by ILLiad by manually updating the ILLiad Client.
• Accessible version tracking: The version of WebView2 currently installed on your machine and used by ILLiad can be easily checked by navigating to the Resources tab located within the ILLiad Options form in the ILLiad Client. 
• New cache clearing options for easier debugging: A Clear Cache button is available next to the WebView2 version number information on the ILLiad Options form that will clear the cache for the WebView2 browser (cookies, logins, and browser history) on the local machine for the user currently logged into the ILLiad Client.

The following addons have been updated to use the WebView2 browser and will be available for download in the ILLiad Addon Directory:

• WorldCat Local Search Client Addon (v.1.5.0)
• Google Search Client Addon (v.1.5.0)

Forms and windows in the ILLiad Client that were previously rendered using Chromium browser controls have been updated to use new WebView2 controls including:

• All DOCLINE forms and controls
• The OCLC Policies Directory window

Updated the citation controls located within the Z39.50, OCLC, and DOCLINE search interfaces on the Request form to display citation information in rich text format.

The ILLiad DOCLINE Lua Scripts bundle will now include two sets of scripts to ensure that the most recent version of the scripts is backward compatible with prior versions of the ILLiad Client that do not support the new WebView2 embedded browser controls released with ILLiad Client v9.2.4: 

• WebView2 versions of the scripts that will use the new embedded WebView2 browser in the ILLiad Client to display DOCLINE forms and controls if the currently installed version of the ILLiad Client is v9.2.4 (or later)
• Chromium versions of the scripts that will use the embedded Chromium browser to display DOCLINE forms and controls if the ILLiad Client is on an earlier version (i.e., v9.2.3 or prior) that does not include support for the WebView2 controls

When the v5.0.0 DOCLINE Scripts update is performed, both the WebView2 and Chromium versions of these scripts will be downloaded to the same DOCLINE Script directory on the local machine. The ILLiad Client will then determine which set of v5.0.0 DOCLINE scripts to load based on the version of the ILLiad Client that is currently installed. 

The Import All button will now import all DOCLINE lending requests starting from the bottom service level link. Previously these requests would be imported starting from the top service level link.

The Import All button will now import all DOCLINE lending requests for each receipt page before attempting to mark receipted to ensure that page navigation does not interrupt the import process.

The session cookie generated by the Atlas Auth Portal will now include SameSite and Secure properties to address login persistence issues experienced in other Atlas products that were caused by the recent SameSite cookie changes rolled out by Google Chrome and other web browsers. Note that these issues do not yet affect ILLiad and the changes to the session cookie in this release were made to provide consistent handling for this cookie across Atlas products.