Table attributes disappear during copying #3549

[oleg-orlov-quantori]

Checklist

• yarn typecheck
• yarn lint:fix
• yarn test
• yarn brl
• yarn changeset
• ui changelog

Fix for this issue #3549

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[changeset-bot]

🦋 Changeset detected

Latest commit: f83f192

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages

Name	Type
@udecode/plate-table	Patch
@udecode/plate-csv	Patch
@udecode/plate-docx	Patch
@udecode/plate	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
plate	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Sep 23, 2024 9:33am

[12joan]

@oleg-orlov-quantori Thanks for the PR.

We realised that the ability to set arbitrary DOM attributes on elements via the attributes property constitutes a security vulnerability, and we've disabled this feature by default on the latest version of Plate. See the security advistory for more information: GHSA-73rg-f94j-xvhx

Can you edit this PR so that withSetFragmentDataTable respects the node.dangerouslyAllowAttributes configuration option on the table plugin? If dangerouslyAllowAttributes is empty (which is the default case), the attributes property should be ignored.

[oleg-orlov-quantori]

@12joan fixed 063bc17

[zbeyens]

src/react/withSetFragmentDataTable.ts(119,13): error TS2304: Cannot find name 'tablePath'.

[oleg-orlov-quantori]

@zbeyens Fixed.
PS
How to install the environment correctly? After yarn install I get errors: "Cannot find module '@udecode/plate-common' or its corresponding type declarations", etc. Because of this, it is difficult to make any changes.

[zbeyens]

Thanks @oleg-orlov-quantori, you need to run yarn build once after install