Skip to content

fix(deps): update dependency ckeditor/ckeditor to v4.16.0#8

Open
renovate[bot] wants to merge 1 commit into10.0from
renovate/ckeditor-ckeditor-4.x
Open

fix(deps): update dependency ckeditor/ckeditor to v4.16.0#8
renovate[bot] wants to merge 1 commit into10.0from
renovate/ckeditor-ckeditor-4.x

Conversation

@renovate
Copy link

@renovate renovate bot commented Apr 16, 2021

WhiteSource Renovate

This PR contains the following updates:

Package Type Update Change
ckeditor/ckeditor (source) require minor 4.6.2 -> 4.16.0

Release Notes

ckeditor/ckeditor4-releases

v4.16.0

Compare Source

v4.15.1

Compare Source

CKEditor 4.15.1

Security Updates:

  • Fixed XSS vulnerability in the Color History feature reported by Mark Wade.

    	Issue summary: It was possible to execute an XSS-type attack inside CKEditor 4 by persuading a victim to paste a specially crafted HTML code into the [Color Button](https://ckeditor.com/cke4/addon/colorbutton) dialog.
    

An upgrade is highly recommended!

Fixed Issues:

API Changes:

Other Changes:

v4.15.0

Compare Source

v4.14.1

Compare Source

CKEditor 4.14.1

Fixed Issues:

Other Changes:

v4.14.0

Compare Source

v4.13.1

Compare Source

CKEditor 4.13.1

Fixed Issues:

  • #​875: Fixed: Pasting inside the editor that contains a table with the Table Selection plugin after selecting all content replaces only the table element instead of the entire content.
  • #​3415: [Firefox] Fixed: Pasting individual list elements fails. Thanks to Jack Wickham!
  • #​3413: Fixed: Menu items with labels containing double quotes are rendered incorrectly.
  • #​3475: [Firefox] Fixed: Pasting plain text over existing content fails and throws an error.
  • #​2027: Fixed: Incorrect email display text after reopening the Link dialog for display names starting with @.
  • #​3544: Fixed: The Special Characters dialog read incorrectly by screen readers due to empty table cells at the end.
  • #​1653: Fixed: Balloon Toolbar is not repositioned when the editor is scrolled with the Div Editing Area feature enabled.
  • #​3559: Fixed: Color Dialog is incorrectly positioned when used with another dialog.
  • #​3593: Fixed: Cannot access a text or comment node when replacing an element node with them via CKEDITOR.htmlParser.filter.
  • #​3524: Fixed: The Easy Image plugin throws an error when any image with an unsupported data type is pasted into the editor.
  • #​3552: Fixed: Incorrect value of CKEDITOR.plugins.widget.repository#selected after selecting the whole editor content.
  • #​3586: Fixed: Content pasted from Microsoft Excel is not correctly recognised by the Paste from Word plugin.
  • #​3585: [Firefox] Fixed: Microsoft Excel content is pasted as an image.
  • #​3625: [Firefox] Fixed: Microsoft PowerPoint content is pasted as an image.
  • #​3474: Fixed: Incorrect focus order after any tab in a dialog was clicked.
  • #​3689: Fixed: Cannot change dialog tabs with keyboard arrow keys after focusing any tab with a mouse click.

API Changes:

v4.13.0

Compare Source

v4.12.1

Compare Source

CKEditor 4.12.1

Fixed Issues:

v4.12.0

Compare Source

v4.11.4

Compare Source

CKEditor 4.11.4

Fixed Issues:

Other Changes:

  • Updated WebSpellChecker (WSC) and SpellCheckAsYouType (SCAYT) plugins:
    _ Language dictionary update: German language was extended with over 600k new words.
    _ Language dictionary update: Swedish language was extended with over 300k new words.
    _ Grammar support added for Australian and New Zealand English, Polish, Slovak, Slovenian and Austrian languages.
    _ Changed wavy red and green lines that underline spelling and grammar errors to straight ones.
    _ #​55: Fixed: WSC does not use CKEDITOR.getUrl() when referencing style sheets.
    _ #​166: Fixed: SCAYT does not use CKEDITOR.getUrl() when referencing style sheets.
    _ #​56: [Chrome] Fixed: SCAYT/WSC throws errors when running inside a Chrome extension.
    _ Fixed: After removing a dictionary, the words are not underlined and considered as incorrect.
    _ Fixed: The Slovenian (sl_SL) language does not work.
    _ Fixed: Quotes with code U+2019 (Right single quotation mark) are considered separators.
    _ Fixed: Wrong error message formatting when the service ID is invalid.
    _ Fixed: Absent languages in the Languages tab when using SCAYT with the Shared Spaces plugin.

v4.11.3

Compare Source

CKEditor 4.11.3

Fixed Issues:

  • #​2721, #​487: Fixed: The order of sublist items is reversed when a higher level list item is removed.
  • #​2527: Fixed: Emoji autocomplete order does not prioritize emojis with the name starting from the used string.
  • #​2572: Fixed: Icons in the Emoji dropdown navigation groups are not centered.
  • #​1191: Fixed: Items in the elements path are draggable.
  • #​2292: Fixed: Dropping a list with a link on the editor's margin causes a console error and removes the dragged text from editor.
  • #​2756: Fixed: The Auto Link plugin causes an error when typing in the source editing mode.
  • #​1986: Fixed: The Cell Properties dialog from the Table Tools plugin shows styles that are not allowed through config.allowedContent.
  • #​2565: [IE, Edge] Fixed: Buttons in the editor toolbar are activated by clicking them with the right mouse button.
  • #​2792: Fixed: A bug in the Copy Formatting plugin that caused the following issues:
    • #​2780: Fixed: Undo steps disappear after multiple changes of selection.
    • #​2470: [Firefox] Fixed: Widget's nested editable gets blurred upon focus.
    • #​2655: [Chrome, Safari] Fixed: Widget's nested editable cannot be focused under certain circumstances.

v4.11.2

Compare Source

CKEditor 4.11.2

Fixed Issues:

  • #​2403: Fixed: Styling inline editor initialized inside a table with the Table Selection plugin is causing style leaks.
  • #​2514: Fixed: Pasting table data into inline editor initialized inside a table with the Table Selection plugin inserts pasted content into the wrapping table.
  • #​2451: Fixed: The Remove Format plugin changes selection.
  • #​2546: Fixed: The separator in the toolbar moves when buttons are focused.
  • #​2506: Fixed: Enhanced Image throws a type error when an empty <figure> tag with an image class is upcasted.
  • #​2650: Fixed: Table dialog validator fails when the getValue() function is defined in the global scope.
  • #​2690: Fixed: Decimal characters are removed from the inside of numbered lists when pasting content using the Paste from Word plugin.
  • #​2205: Fixed: It is not possible to add new list items under an item containing a block element.
  • #​2411, #​2438 Fixed: Apply numbered list option throws a console error for a specific markup.
  • #​2430 Fixed: Color Button and List Block items are draggable.

Other Changes:

  • Updated the WebSpellChecker (WSC) plugin:
    * #​52 Fixed: Clicking "Finish Checking" without a prior action would hang the Spell Checking dialog.
  • #​2603: Corrected the GPL license entry in the package.json file.

v4.11.1

Compare Source

CKEditor 4.11.1

Fixed Issues:

  • #​2571: Fixed: Clicking the categories in the Emoji dropdown panel scrolls the entire page.

v4.11.0

Compare Source

v4.10.1

Compare Source

CKEditor 4.10.1

Fixed Issues:

API Changes:

v4.10.0

Compare Source

v4.9.2

Compare Source

CKEditor 4.9.2

Security Updates:

  • Fixed XSS vulnerability in the Enhanced Image (image2) plugin reported by Kyaw Min Thein.

    	Issue summary: It was possible to execute XSS inside CKEditor using the `<img>` tag and specially crafted HTML. Please note that the default presets (Basic/Standard/Full) do not include this plugin, so you are only at risk if you made a custom build and enabled this plugin.
    

We would like to thank the Drupal security team for bringing this matter to our attention and coordinating the fix and release process!

v4.9.1

Compare Source

CKEditor 4.9.1

Fixed Issues:

v4.9.0

Compare Source

v4.8.0

Compare Source

v4.7.3

Compare Source

CKEditor 4.7.3

New Features:

Fixed Issues:

Other Changes:

v4.7.2

Compare Source

CKEditor 4.7.2

New Features:

Fixed Issues:

Other Changes:

v4.7.1

Compare Source

CKEditor 4.7.1

New Features:

Fixed Issues:

  • #​515: [Chrome] Fixed: Mouse actions on CKEditor scrollbar throw an exception when the Table Selection plugin is loaded.
  • #​493: Fixed: Selection started from a nested table causes an error in the browser while scrolling down.
  • #​415: [Firefox] Fixed: Enter key breaks the table structure when pressed in a table selection.
  • #​457: Fixed: Error thrown when deleting content from the editor with no selection.
  • #​478: [Chrome] Fixed: Error thrown by the Enter Key plugin when pressing Enter with no selection.
  • #​424: Fixed: Error thrown by Tab Key Handling and Indent List plugins when pressing Tab with no selection in inline editor.
  • #​476: Fixed: Anchors inserted with the Link plugin on collapsed selection cannot be edited.
  • #​417: Fixed: The Table Resize plugin throws an error when used with a table with only header or footer rows.
  • #​523: Fixed: The editor.getCommandKeystroke() method does not obtain the correct keystroke.
  • #​534: [IE] Fixed: Paste from Word does not work in Quirks Mode.
  • #​450: Fixed: CKEDITOR.filter incorrectly transforms the margin CSS property.

v4.7.0

Compare Source


Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant