CKEditor 4.5.11 发布了,该版本更新详细列表如下:
安全更新:
-
[Severity: minor] Fixed the target="_blank" vulnerability reported by James Gaskell.
Issue summary: If a victim had access to a spoofed version of ckeditor.com via HTTP (e.g. due to DNS spoofing, using a hacked public network or mailicious hotspot), then when using a link to the ckeditor.com website it was possible for the attacker to change the current URL of the opening page, even if the opening page was protected with SSL.
新功能:
-
#14747: The Enhanced Image caption now supports the link
target
attribute. -
#7154: Added support for the "Display Text" field to the Link dialog. Thanks to Ryan Guill!
修复bug:
-
#13362: [Blink, WebKit] Fixed: Active widget element is not cached when it is losing focus and it is inside an editable element.
-
#13755: [Edge] Fixed: Pasting images does not work.
-
#13548: [IE] Fixed: Clicking the elements path disables Cut and Copy icons.
-
#13812: Fixed: When aborting file upload the placeholder for image is left.
-
#14659: [Blink] Fixed: Content scrolled to the top after closing the dialog in a
<div>
-based editor. -
#14825: [Edge] Fixed: Focusing the editor causes unwanted scrolling due to dropped support for the
setActive
method.
下载地址: