Fixed Issues:
<figure> tag with an image class is upcasted.getValue()function is defined in the global scope.Other Changes:
package.json file.Fixed Issues:
Security Updates:
Fixed XSS vulnerability in the HTML parser reported by maxarr.
Issue summary: It was possible to execute XSS inside CKEditor after persuading the victim to: (i) switch CKEditor to source mode, then (ii) paste a specially crafted HTML code, prepared by the attacker, into the opened CKEditor source area, and (iii) switch back to WYSIWYG mode.
An upgrade is highly recommended!
New Features:
aria-haspopup property values. The Menu Button aria-haspopup value is now menu, the Panel Button and Rich Combo aria-haspopup value is now listbox.contextmenu_contentsCss configuration option to allow adding custom CSS to the Context Menu.Fixed Issues:
required attribute is not correctly recognized by the Form Elements plugin dialog. Thanks to Roli Züger!Permission denied is thrown when opening a Panel instance.config.forceSimpleAmpersand option does not work. Thanks to Alex Maris!Escape HTML Entities] plugin with custom additional entities configuration breaks HTML escaping.(Selected) text at the end of the label when clicked.onAbort method of the Upload Widget is not called when the loader is aborted.CKEDITOR.filter.instances is causing memory leaks.API Changes:
CKEDITOR.ui.panel.block.getItems method now also returns input elements in addition to links.CKEDITOR.tools.convertToPx function now converts negative values.insert method now passes editor and commandData. Thanks to marcparmet!tools.eventsBuffer and tools.throttle functions logic into a separate namespace.tools.eventsBuffer was extracted into tools.buffers.event,tools.throttle was extracted into tools.buffers.throttle.CKEDITOR.filter constructor accepts an additional rules parameter allowing to bind the editor and filter together.editor.getCommandKeystroke method accepts an additional all parameter allowing to retrieve an array of all command keystrokes.hasArrow definition option can by identified by the .cke_button_expandable CSS class.Other Changes:
Fixed Issues:
instanceReady.editor.destroy() during the file upload throws an error. Thanks to Maksim Makarevich!id attribute. Thanks to Nathan Samson!<font> tag is not preserved when proper configuration is provided and a style is applied by the Font plugin.object, embed, param are removed from the editor content.API Changes:
editor.plugins.detectConflict() method finding conflicts between provided plugins.New Features:
CKEDITOR.dom.range for matching text.Fixed Issues:
CKEDITOR.dialog.definition.onHide API documentation. Thanks to sunnyone!\u3000) is lost when pasting text.config.forcePasteAsPlainText option is not respected in internal and cross-editor pasting.API Changes:
replace dialog from the Find / Replace plugin with a tabId option in the find command.CKEDITOR.editor.addCommand() method can now accept a CKEDITOR.command instance as a parameter.extraPlugins, removePlugins and plugins configuration options allow whitespace.extraPlugins, removePlugins and plugins configuration options allow passing plugin names as an array.getClientRect() function allowing to retrieve an absolute bounding rectangle of the element, i.e. a position relative to the upper-left corner of the topmost viewport.getClientRects() method to CKEDITOR.dom.range. It returns a list of rectangles for each selected element.CKEDITOR.tools.throttle() function.Other Changes:
gv_GB) and Interlingua (ia_XR).alt attribute for the logo image in the About tab of SCAYT.Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2019-ae7f274d24Please login to add feedback.
This update has been submitted for testing by siwinski.
This update has been pushed to testing.
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
This update has been submitted for batched by siwinski.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.