14.30 Technical and Security Updates

Many changes are technical in nature to improve to underlying architecture, deliver system wide updates and to enhance security. These changes are listed below:


Technical Updates

Performance Improvement for Large Loads

Overview: A performance improvement changes how the imc Learning Suite sends the responses of selected REST endpoints to the browser. Before this release, the application built a response completely in memory before it sent the first byte. It needed the finished response to calculate the HTTP ETag value that browsers use for caching. With this release, selected endpoints stream their response to the browser while the server is still producing it, and each of these endpoints sets its own ETag value.

Benefits and Use Cases: You see the effect only in behavior: requests that return large amounts of data start delivering data earlier, and the application server holds less data in memory while it answers them. Benefits of the update include:

  • Large responses reach the browser sooner, because the server sends data as it produces it instead of after it finished.

  • The application server consumes less memory per request, which leaves more headroom at peak load.

  • The server skips buffering and hashing work for the affected endpoints, which reduces processing per request.

  • Installations with large data volumes and many parallel users behave more predictably under load.

Audience: Technical administrators

Setup & Access: Not required on the customer side. The exclusion list is a deployment parameter of the web application (web.xml), maintained by Scheer IMC Hosting Team and delivered with the release. As an administrator or operator of on-premises installations, you do not need to change anything. Endpoints that are not on the list keep their previous behaviour.

Considerations & Limitations: No migration is needed. You receive the change with the standard update to 14.30.0.0. There is no data migration, no manual step, and no reconfiguration. Existing configurations, interfaces, and customisations stay valid.
One point concerns integrations: for the endpoints on the exclusion list, the endpoint sets the ETag header instead of the filter. If an integration of yours uses conditional requests (If-None-Match and 304 Not Modified) against one of these endpoints, confirm that behavior in your test system after the update.

Further considerations include:

  • The release contains no user interface change: no new screens, fields, settings, roles, or permissions.

  • The change applies only to the endpoints that Scheer IMC puts on the exclusion list shipped with the release. Every other endpoint keeps the previous ETag handling.

  • API contracts stay unchanged: same URLs, same request parameters, same response structure, same authentication.

  • The change affects the web layer only. It doesn't change data storage, scheduled jobs, or report generation.

  • The release includes no configurable performance settings. You can't enable, disable, or tune streaming yourself.

Testing: Not required as the release changes no functionality, there’s no learner-visible behaviour and no stored record.

Risk rating: Low

Performance Improvement for Public Pages

Overview: When navigating to public entry points the pages now load noticeably faster and respond immediately. Pages include the Login page, External Dashboard, or Public Information and Policy pages. The faster load is because public and unauthenticated pages now load only the essential components needed for your current session. This delivers a lightweight and streamlined user interface before sign-in.

Benefits and Use Cases: Optimised loading sequences ensure pages render more quickly on both desktop and mobile devices. Key benefits of these improvements include:

  • Learners and visitors receive an instant, smooth entry into the learning environment.

  • First-time visitors and external learners experience immediate interface responsiveness without lag or visual delays caused by background script loading.

  • Lower server resource overhead during high-traffic peak hours (such as mass login windows or organisation-wide rollouts) ensures reliable platform performance.

Audience: All users

Setup & Access: Not required as the changes are automatically applied.

Considerations & Limitations: There are no considerations or limitations.

Testing: Not required as this is a performance improvement with no visual changes.

Risk rating: Low

Event Bus: Client ID in Skill and Registration Change Messages

Overview: The Event Bus has been updated with the Qualification Value Changes ("Skill") message and the Registration Change message now including the client_id field. This provides the participant's client identifier directly within event messages.

Benefits and Use Cases: The Event Bus provides access to key transactional or change information. Benefits of providing the client_id field in messages include:

  • Enabling downstream systems to consume and process client-specific data without additional lookups.

  • Improving consistency across Skill and Registration Change event payloads.

  • Supporting standardised handling of empty values when no client ID is available.

Audience: Technical administrators

Setup & Access: The changes are automatically available, providing the Event Bus is configured. This is done in the Configuration function by editing the Event Queue menu.

Considerations & Limitations: Requires the Event Bus architecture.

Testing: Providing that the Event Bus is configured, you can access the Qualification Value Changes ("Skill") message and the Registration Change message to verify the client_id is included.

Risk rating: Low

Event Bus: Price, Location, and Planning Status in Course and Registration Change Messages

Overview: The Event Bus has been updated to include some additional information. Within the Course changes event you can now directly access Price, Location, and Planning Status; this is available independent of course registrations. Additionally, the Events for bookings event now includes Portfolio ID and Personal Start/End Date to provide richer registration context without additional lookups.

Benefits and Use Cases: Consumers of the Event Bus can now access additional relevant information without additional lookups. The benefits of the update include:

  • Reducing the need for additional course data lookups by making Price and Location available at the course level instead of only via registrations.

  • Providing Portfolio ID and Personal Start/End Date directly in the Registration Change Event.

  • Improving the reliability and consistency of integration with external systems.

Audience: Technical administrators and Reporters

Setup & Access: The changes are automatically available, provided the Event Bus is configured. This is done in the Configuration function by editing the Event Queue menu.

Considerations & Limitations: Requires configuration of the Event Bus.

Testing: Provided the Event Bus is configured, you can test the following changes:

  • In the Course changes event, External Price and Location are included as explicit fields, alongside Planning Status.

  • In the Course changes event, Course-level data (External Price, Location, Planning Status) is available.

  • Changes to External Price, Location, or Planning Status on a course trigger an updated Course Change Event.

  • The Registration Change Event ("Events for bookings") includes Portfolio ID, Personal Start Date + Time, and Personal End Date + Time as additional fields.

Risk rating: Low


System-wide Updates

Unified Rich Text Editor across imc Learning Suite

Overview: The rich text editor is used across all areas of the imc Learning Suite for populating description fields. This includes formatting course descriptions, assessment items, feedback forms, and automated email communications. Sun Editor replaced CK Editor to provide an improved experience and the following update has now occurred:

  • Consistent User Experience: Modernised WYSIWYG editing across all authoring and configuration interfaces in ILS.

  • Streamlined Formatting & Clean Paste: Automatically sanitises external content pasted from tools like Microsoft Word, eliminating broken styles and legacy tags.

  • Reliable Placeholders & Styling: Seamlessly insert dynamic system placeholders and media with robust character and paragraph formatting tools (including sub/superscript, and table controls).

Benefits and Use Cases: Content authors, instructional designers, and administrators require a reliable, accessible, and consistent rich text editor across all areas of imc Learning Suite (ILS). Providing a modernised WYSIWYG editor helps ensure improved layouts without breakage and improved security.

Audience: Administrators

Setup & Access: Not required as the changes are automatically applied.

Considerations & Limitations: The strikethrough option is no longer supported.

Testing: Testing is not required, but the change can be viewed in any rich text editor.

Risk rating: Low


Security Findings (Other)

Overview: There have been no security fixes in Innovation Pack 30 that created an impact to existing functionality.