Upgrade tinymce

closes #16859

js/RichText/ContentTemplatesParameters.js

@@ -64,7 +64,7 @@ GLPI.RichText.ContentTemplatesParameters = class {
         this.editor.ui.registry.addAutocompleter(
             'content_templates',
             {
-                ch: '{',
+                trigger: '{',
                 minChars: 0,
                 fetch: function (pattern) {
                     return that.fetchItems(pattern);

js/RichText/UserMention.js

@@ -66,7 +66,7 @@ GLPI.RichText.UserMention = class {
         this.editor.ui.registry.addAutocompleter(
             'user_mention',
             {
-                ch: '@',
+                trigger: '@',
                 minChars: 0,
                 fetch: function (pattern) {
                     return that.fetchItems(pattern);

package.json

@@ -63,7 +63,7 @@
         "select2": "^4.0.13",
         "spectrum-colorpicker2": "^2.0.9",
         "spin.js": "^4.1.0",
-        "tinymce": "^6.7.3",
+        "tinymce": "^7.0.0",
         "tinymce-i18n": "^23.6.19"
     },
     "scripts": {

src/Html.php

@@ -3910,6 +3910,7 @@ public static function initEditorSystem($id, $rand = '', $display = true, $reado
                   : CFG_GLPI['root_doc']+'/public/lib/tinymce/skins/ui/oxide',
                body_class: 'rich_text_container',
                content_css: '{$content_css}',
+               highlight_on_focus: false,
 
                min_height: 150,
                resize: true,
@@ -3943,6 +3944,10 @@ public static function initEditorSystem($id, $rand = '', $display = true, $reado
                browser_spellcheck: true,
                cache_suffix: '{$cache_suffix}',
 
+               // Security options
+               // Iframes are disabled by default. We assume that administrator that enable it are aware of the potential security issues.
+               sandbox_iframes: false,
+
                setup: function(editor) {
                   // "required" state handling
                   if ($('#$id').attr('required') == 'required') {