Skip to content

Commit

Permalink
[BUGFIX] Update ckeditor to 4.14.0
Browse files Browse the repository at this point in the history
This commit updates ckeditor to version 4.14.0. This release contains
a bugfix for self-XSS'ing the editor:
https://ckeditor.com/blog/CKEditor-4.14-with-Paste-from-LibreOffice-released/#security-issues-fixed

Command executed:

  yarn add ckeditor4:^4.14.0

Resolves: #91149
Releases: master, 9.5
Change-Id: I46e2b95773ed0b4fd623a1843ab690a0b596728d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64262
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Susanne Moog <look@susi.dev>
Tested-by: Benni Mack <benni@typo3.org>
Reviewed-by: Oliver Klee <typo3-coding@oliverklee.de>
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: Josef Glatz <josefglatz@gmail.com>
Reviewed-by: Susanne Moog <look@susi.dev>
Reviewed-by: Benni Mack <benni@typo3.org>
  • Loading branch information
andreaskienast authored and bmack committed Apr 21, 2020
1 parent 1fb5036 commit a7cb879
Show file tree
Hide file tree
Showing 650 changed files with 1,825 additions and 1,783 deletions.
2 changes: 1 addition & 1 deletion Build/package.json
Expand Up @@ -75,7 +75,7 @@
"chart.js": "^2.9.3",
"chosen-js": "^1.8.7",
"ckeditor-wordcount-plugin": "^1.17.2",
"ckeditor4": "^4.13.0",
"ckeditor4": "^4.14.0",
"codemirror": "^5.49.0",
"cropper": "^2.3.4",
"d3": "^4.10.0",
Expand Down
8 changes: 4 additions & 4 deletions Build/yarn.lock
Expand Up @@ -1180,10 +1180,10 @@ ckeditor-wordcount-plugin@^1.17.2:
resolved "https://registry.yarnpkg.com/ckeditor-wordcount-plugin/-/ckeditor-wordcount-plugin-1.17.2.tgz#9bd528bcf3f2898948fc056d8fdbe80106e87381"
integrity sha512-CAS64xhKCQJE3TGIFQECBIrGNFp4neFRdhB4JQ5DiCvnZ36VXd7UydJm6UiIBXZEUag9ykdBe4n5anYIkG6sNA==

ckeditor4@^4.13.0:
version "4.13.1"
resolved "https://registry.yarnpkg.com/ckeditor4/-/ckeditor4-4.13.1.tgz#f348f6bce2b2f0b8e89b394fa0a4579333e53469"
integrity sha512-Fslq8yT9YtbIWAnexnW8cTl/fK6QiAbSaimq/iZWS/FAqSyVEJk72+fA4BczCUMx7aj/Wari0vZ8nE1L5akYCQ==
ckeditor4@^4.14.0:
version "4.14.0"
resolved "https://registry.yarnpkg.com/ckeditor4/-/ckeditor4-4.14.0.tgz#bfcbe942599fa0c6f488309ecbfe38b2519f919b"
integrity sha512-g5p3bhbxbwB094bE7ss0rOyvG/azYdRjLTyngnPM2+fKZhnPrMVaFDx3SiiWKB+zyvndT3Deu54VTv/z2MQJCA==

class-utils@^0.3.5:
version "0.3.6"
Expand Down
2,045 changes: 1,024 additions & 1,021 deletions typo3/sysext/rte_ckeditor/Resources/Public/JavaScript/Contrib/ckeditor.js

Large diffs are not rendered by default.

@@ -1,4 +1,4 @@
Copyright (c) 2003-2019, CKSource - Frederico Knabben. All rights reserved.
Copyright (c) 2003-2020, CKSource - Frederico Knabben. All rights reserved.
For licensing, see LICENSE.md or https://ckeditor.com/legal/ckeditor-oss-license

af.js Found: 62 Missing: 4
Expand Down

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Large diffs are not rendered by default.

0 comments on commit a7cb879

Please sign in to comment.