Release highlights: Content sanitization, Workspaces, and Noticeboard
Wizdom version 6.38 has landed! In this version of Wizdom, a lot of work has gone into the quality improvement of Wizdom in order to deliver an equally good experience in Wizdom for SharePoint’s classic and modern experiences. But the developers have also set some time aside to treat you all with new features.
We’re launching a new module that enables you to sanitize content created by end-users and admins. And, also, this version of Wizdom brings improvements to the user interface of the Workspaces and Noticeboard module.
Updates to Wizdom for SharePoint’s classic and modern experiences
Highlight #1: We’ve introduced new functionality for content sanitization
This enhancement is something that goes on behind the scenes to further increase and add nuances to the level of security in your Wizdom solution.
To increase the security level and at the same time add flexibility regarding content sanitization, this release includes a new module for security settings named “Security” that allows admins to choose between three levels of sanitization – 1, 2, and 3 - of the content end-users and editors create in SharePoint and Wizdom.
This means, content entered in, for example, the Noticeboard and the Cafeteria Menu, can be automatically examined before it’s published in SharePoint and, depending on the level of sanitization chosen by the administrator, will only preserve whitelisted HTML tags, attributes and styles.
The “Security” module is found in the Admin section of Wizdom Configuration Center. Under “Sanitization”, the admin will be able to select between three levels of content sanitization to find the standard that matches business needs.
Three levels of sanitization
Level 3: Uses a highly restricted whitelist of HTML tags, attributes, styles etc. to prevent cross-site scripting. This sanitization level will disallow CSS, links, and most embed codes from external services, such as YouTube, Instagram, etc.
Level 2: Uses a less restricted whitelist which will block all scripting, but still allow iframe embeds, CSS, and links.
Level 1: Does not sanitize content. All HTML will be allowed in content generated by users and editors.
PLEASE NOTE: After updating to Wizdom version 6.38, all Wizdom solutions will per default be set to security level 2. This level blocks all scripting but will allow iframe embeds and CSS which, for example, enables you to present embedded content from resources like Instagram and YouTube on your intranet.
Also note that level 2 can block content, users and editors were able to publish before, and that this can, potentially, cause changes in how modules with user and editor generated content behave. If you experience such issues, and conclude that content sanitization is not vital for your organization, you can change the security level back to 1. After this, new content created will behave as before.
The functionality does not work retroactively. This means, that all content created before a change in sanitization level will not be affected by the new level.
Updates to Wizdom for SharePoint’s modern experiences
Highlight #2: Workspaces just got a little chicer
As you know, Wizdom Workspaces module allows you to create workspaces in classic SharePoint sites, SharePoint Communication sites, and in Teams sites with and without Office 365 groups.
In the overview of workspaces in an instance, however, it hasn’t always been clear what each workspace has been built on. Therefore, we’ve introduced icons for SharePoint, MS Teams, and Office 365 Groups that will visually aid the user by indicating whether a workspace in the overview will navigate to a SharePoint Communication site, MS Team site, or a team in MS Teams.
As an editor, you have the freedom to hide these icons from the overview. In this way, the Workspaces overview will look exactly like before the release.
Also, you will now have the option of hiding the “favorite” star and the arrow displaying metadata when unfolded.
Highlight #3: You can now edit and add images to Noticeboard comments
Also Noticeboard offers new options for end-users and editors.
You can now edit comments you have made to a Noticeboard post after the comment is posted.
As you can spark up your comments with images and GIFs.
To ensure new Noticeboard news are always shown to users, even if they’ve had the intranet front page open for a while, we’ve added auto-refresh to Noticeboard web parts.
As an intranet editor, you can adjust the number of minutes between auto-refreshes in the Noticeboard web part settings. Per default, the web part will refresh its content every 10th minute. If you want to completely disable auto-refresh, you can set the interval to 0.
By: Anja Julia Hartzell
As a dedicated content creator working in the area of customer success, Anja designs communication and education to help customers get the most out of the Wizdom product.