CUNY Academic Commons

This rang a bell to me, and I see that there were concerns about this - https://redmine.gc.cuny.edu/issues/20686

I forget if we've discussed this on the prior tickets, but if I'm reading Jana's request correctly, Jana is interested in the H5P Wordpress plugin not just for the general H5P functionality (embedded quizzes, interactive content, etc), but because you turn your Wordpress site (i.e. the Commons) into a host for your H5P content by installing the plugin.

That's why there is an H5P.org, for open source and DIY hosting installs, and H5P.com, which is the paid model that hosts everything for you and I think starts at something like $80/month.

I imagine Boone will chime in, but from a scan back over the old tickets, I believe we'll be at an impasse here because one of the main security issues was allowing .h5p file uploads, which are essentially relabeled ZIP files, and the relative ease of uploading something bad in the .h5p wrapper instead of legitimate h5p content.

I wish there were alternatives, though I haven't seen any, as I know H5P continues to come up. Another data point since the last time I looked into this is that H5P was acquired by D2L (i.e. Brightspace) over the summer. I wonder if that will impact the way H5P can be used in the future.

https://edtechchronicle.com/d2l-acquires-global-saas-learning-solution-h5p-group/

The user is wondering Pressbooks is an option.

The user is wondering Pressbooks is an option.

Pressbooks cannot be installed on the Commons. Our team has toyed in the past with the idea of offering a Pressbooks installation that would live alongside the Commons, but it hasn't come to fruition, and I don't expect that it will in the near future. See #7232.

I imagine Boone will chime in, but from a scan back over the old tickets, I believe we'll be at an impasse here because one of the main security issues was allowing .h5p file uploads, which are essentially relabeled ZIP files, and the relative ease of uploading something bad in the .h5p wrapper instead of legitimate h5p content.

Correct. See #20686, #9947, #10749. The situation is the same now as it was then.

For the time being, I think we have to tell this user "no". But perhaps we can discuss the issue during this week's call and decide whether it's something we want to devote resources to in the Spring semester.

Marilyn, why don't we suggest to the user signing up for the CUNY-wide Pressbooks platform?

https://pressbooks.cuny.edu/

I have access myself, and I see that the H5P plugin is available there, but I don't have any experience using it.