Releases for H5P - Create and Share Rich Content and Applications

Updated H5P core:

• Improve installing H5P libraries (make operation a bit more atomic)
• Allow newlines in metadata field (License Extras and Author Comments)
• Add gltf and glb to file whitelist
• Fix PHP deprecation warnings
• Several accessibility improvements
• Translation updates
• Add Vimeo support
• Add H5P.Tooltip and H5P.isEmpty() in core

Development release for the 2.0.x branch.

See H5P - Create and Share Rich Content and Applications - Critical - Remote Code Execution - SA-CONTRIB-2022-064.

PHP8 compatibility

• Fix JS files being loaded multiple times
• Fix resizing on exiting fullscreen
• Fix blinking CKEditor dialog
• Fix CKEditor collapsing if calculator element ever is hidden
• New design for Tutorial and Example links
• Update CKEditor

HFP-3008 - Add content language to iframe
Fix issue #3085464 by Berdir: Delete query fails when purging data for deleted fields
Fix issue #3162064 by amateescu: Load the H5P classes shipped with the module only if they are not already managed by Composer
Fix issue #3113772 by sendor: Error Ajax on save a custom block with h5p field on layout builder
Fix issue #3031362 by abdhomsi: Unable to alter scripts or styles for embed view
Update CK Editor

Improved attribute filtering performance

• Adds optional accessible title for assistive technologies for content
• Allowing fullscreen and microphone on iframe embeds
• Adds title to H5P iframe
• Adds language property to H5P iframe
• Adds Panopto video provider integration
• Fix issue where editor would only use half the available width in Firefox
• Prepares for release of content hub

- Labels and accessibility improvements for all input fields in the authoring tool
- Proper semantics for disabled buttons (copy and paste)
- Contrast, icons, and accessibility adjustments
- Trigger initialized event for external listeners when editor has been initialized
- Hide focus effect when using the mouse
- Improve clearing filtered parameters

Bug fixed:
An invalid finnish language file made the editor break.

- Added full screen editing mode
- Allow setting bitrate for video files
- Change cross origin settings to only be set for local files, otherwise will remove cross origin from the media, instead of defaulting to "anonymous" cross origin settings.
- Fixes crashing when changing language in the Branching Scenario editor
- Fixes an issue where common fields would not be properly set
- Fixes an issue with creating directories during automatic upgrade of content when uploadinng old content versions
- Translation updates (big thanks to all contributors)

Fix correct default language not always loading.

Added automated upgrade of content on save.
Improved error handling for content upgrade.
Added support for language switching in editor.
Added a new reuse dialog for download or copy of content in view.

New H5P Core version
Bugfixes

Bugfixes:

• When editing an H5P, and replacing a media file, it ended up in the file_managed table marked as temporary, which means it was deleted by Drupal's cleanup scripts.
• Different problems related to the legacy uploader (i.e, the one seen if the H5P HUB is not enabled)

A critical bug was introduced in 7.x-1.36, which made H5P content being lost in some circumstances (e.g. when bulk updating H5P nodes).

We strongly advise updating ASAP if you are running on 7.x-1.36 or 7.x-1.37

Fixed bug related to loading of language files in the H5P authoring tool. For the content types using custom editors, If using a language that doesn't have a translation file in H5P, it didn't fall back to the English one. Now it does.

Detailed metadata & license
Copy and paste H5Ps
Support for Mathematical expressions through latex (Read more here: https://h5p.org/mathematical-expressions)
Minor bugfixes

New H5P core version (1.15) which communicates to the client if reporting is enabled.
Minor changes in JS to support webpack.
Minor changes in CSS to improve placement of "disable fullscreen button".
Issue #2936079 by freelock: h5p_settings gets updated too often
HFP-1921 Fix incorrect permission check crashing

Fixed bug (wrongly formatted schema config yaml file)

• Fixed H5P editor bug seen in Safari 11.0.2.
• Stop using undefined PHP properties (https://www.drupal.org/project/h5p/issues/2932753)

Fixed required version of Core and Editor in composer.json.
Fixed proper clearing of cache when a library/content type is updated.
Fixed old libraries always updating.
Adds more detailed error messages with links for troubleshooting them.
Prevent deleting sub-content of linked directories.
Updated CKEditor to version 4.7.3.
Added Greek translations (thanks to xarhsdev).
Added Finnish translations (thanks to Janne Särkelä).
Added support for editor iframe reloading.
Allow multiple content to be loaded at the same time.

Fix requirement check giving false warning.

H5P - Critical - Reflected Cross Site Scripting (XSS) - DRUPAL-SA-CONTRIB-2017-071

Fixed issues when using the H5P field in sub form parts, e.g. when the Paragraph module is used.