NEWSLETTER
ISSUE #22 | June 4, 2024
Did you know...?
This month we are dedicating the newsletter to several announcements and other items that you might have missed in recent communications. The stories this month highlight COmanage Registry’s accessibility conformance statement, the release of Registry v5 Milestone Release 12, and information about a Registry v4.3.3 update to how HTML markup is handled.
Open Office Hours - June 7
Do you have a question about deploying or configuring Registry or Match? Want to get some input on a solution architecture design? Want to hear how your colleagues in the community are solving problems similar to yours? Each month you can bring your topics for discussion to the call. No need to register or spin up a presentation (but feel free if it suits you!); just show up! A short conversation starter kicks off each session to help get the discussion started.
Friday, June 7 at 12:00 PM (America/New York)
(no registration necessary)
https://us06web.zoom.us/j/84743471575?pwd=d29QNFM1KzEwUFZvRFg0enJ1dlNmQT09
2024 Topic Aperitif: COmanage Registry 5.0 Update
Much of the COmanage Project development team is focused on development toward the release of COmanage Registry 5.0. We will kick off each of the Office Hours in 2024 with a brief update on the latest developments.
The Importance of Accessibility
COmanage tools have always been designed with accessibility in mind. With version 4.x of Registry, we added the following WCAG 2.1 AA accessibility statement to the COmanage Style Guide:
RELEASE: Registry v5 Milestone Release 12
In early May, we announced the latest Milestone Release for Registry v5. This release adds the following features to version PE 5:
- Message Templates
- Notifications
- Oracle SqlServers (experimental)
- SmtpServers
- Lots of frontend improvements
- Improvements to handling of status during Pipelines
- Various bug fixes, especially for Transmogrification
- Container updates
You can find details about this release, including how to gain access to it, in the release announcement. Many thanks to the following organizations that provided funding for MR 12:
- The CILogon Project and the University of Illinois
- SCG Collaboration Group
- Southern Methodist University
- And an additional funder (pending disclosure approval)
Learn more about Registry v5 Milestone Releases in Newsletter issue #20 (March 2024).
Changes to HTML markup in Registry
To better handle HTML markup in fields where it is allowed, the recently released Registry v4.3.3 makes use of the html-sanitizer library (version 1.5). This library aims to handle, clean, and sanitize HTML supplied by users to prevent the inadvertent or deliberate introduction of application security problems when the HTML is stored and displayed.
This library has a deep understanding of HTML: it parses and rewrites the HTML DOM output, keeping only the safe elements and stripping any tag or attribute not explicitly allowed. The Registry fields that are impacted by this update include
- Announcement header and footer fields,
- Dashboard header and footer fields, and
- Terms and Conditions
These fields are now stripped of <script> tags and most HTML attributes on output.
For more information about supported tags, see the configuration documentation.
The impacted Registry fields support tags found in the ['basic', 'code', 'image', 'list', 'table', 'details', 'extra'] extensions. The Dashboards header and footer also allow <style> tags with custom CSS.
Themes, which allow for full control over the interface, are unaffected by this change and will accept <script> tags and other custom markup.
COmanage News
Do you have ideas or news to share? Let us know on the #incommon-comanage slack channel or by emailing Laura!
That’s it for this month’s newsletter. We hope to see you during our next open office hours!
About The COmanage Project
COmanage is an Open Source Project that is focused on streamlining digital lifecycle management for your populations. It consists of two tools: Registry and Match.
COmanage Registry is an identity registry with flexible enrollment and lifecycle management capabilities that helps you meet your identity management objectives using standardized tools and approaches. It can be used as a central person registry, a guest management system, or a collaboration hub for scholarly collaborations.
COmanage Match performs identity de-duplication in order to help minimize the creation of duplicate accounts for the same individual. It provides a heuristic-based system for matching identity records across multiple authoritative systems of record. Match can be used with Registry or as a standalone product complementary to your other tools.
Learn more about the project and its supporters at https://incommon.org/software/comanage/.