MendDemo-josh / Umbraco-CMS

The simple, flexible and friendly ASP.NET CMS used by more than 730.000 websites
https://umbraco.com
MIT License
0 stars 0 forks source link

Update dependency tinymce to v6 - autoclosed #27

Closed mend-for-github-com[bot] closed 11 months ago

mend-for-github-com[bot] commented 11 months ago

This PR contains the following updates:

Package Type Update Change
tinymce (source) dependencies major 4.9.11 -> 6.7.1

By merging this PR, the issue #7 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 WS-2021-0001
Medium Medium 6.1 CVE-2023-45818
Medium Medium 6.1 CVE-2023-45819
Medium Medium 6.1 WS-2021-0025
Medium Medium 6.1 WS-2021-0133
Medium Medium 6.1 WS-2021-0406
Medium Medium 6.1 WS-2021-0413

Release Notes

tinymce/tinymce ### [`v6.7.1`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​671---2023-10-19) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.7.0...6.7.1) ##### Fixed - Specific HTML content caused mXSS when using undo/redo. #TINY-10180 - Specific HTML content caused mXSS when using the `getContent` and `setContent` APIs with the `format: 'raw'` option, which also affected the `resetContent` API and the draft restoration feature of the Autosave plugin. #TINY-10236 - Notification messages containing HTML were not properly XSS sanitized before being displayed. #TINY-10286 ### [`v6.7.0`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​670---2023-08-30) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.6.2...6.7.0) ##### Added - New `help_accessibility` option displays the keyboard shortcut to open the in-application help in the status bar. #TINY-9379 - Added a new `InsertNewBlockBefore` command which inserts an empty block before the block containing the current selection. #TINY-10022 - Added a new `InsertNewBlockAfter` command which inserts an empty block after the block containing the current selection. #TINY-10022 ##### Improved - Adding a newline after a table would, in some specific cases, not work. #TINY-9863 - Menus now have a slight margin at the top and bottom to more clearly separate them from the frame edge. #TINY-9978 - Updated **More** toolbar button tooltip text from *More...* to *Reveal or hide additional toolbar items*. #TINY-9629 - Where multiple case sensitive variants of a translation key are provided, they will now all be preserved in the translation object instead of just the lowercase variant. #TINY-10115 - Improved screen reader announcements of the column and row selection in the grid presented by the **Table** menu and toolbar item. #TINY-10140 - Improved the keyboard focus visibility for links inside dialogs. #TINY-10124 ##### Changed - Change `UndoLevelType` from `enum` to union type so that it is easier to use. #TINY-9764 - The pattern replacement removed spaces if they were contained within a tag that only contained a space and the text to replace. #TINY-9744 - If loading content CSS takes more than 500ms, the editor will be set to an *in progress* state until the CSS is ready. #TINY-10008 ##### Fixed - Applying an ordered or unordered list to a selected checklist incorrectly turned the list into paragraphs. #TINY-9975 - Returning an empty string in a custom context menu update function resulted in a small white line appearing on right-click and the browser-native context menu would not present. #TINY-9842 - For sufficiently long URLs and sufficiently wide windows, URL autocompletion hid middle portions of the URL from view. #TINY-10017 - Numeric input in toolbar items did not disable when a switching from edit to read-only mode. #TINY-10129 - The Quick Toolbars plugin showed text alignment buttons on pagebreaks. #TINY-10054 - Creating lists in empty blocks sometimes, and incorrectly, converted adjacent block elements into list items. #TINY-10136 - Creating a list from multiple `
` elements only created a partial list. #TINY-9872 - Tab navigation incorrectly stopped around `iframe` dialog components. #TINY-9815 - It was possible to delete the sole empty block immediately before a `
` element if it was nested within another `
` element. #TINY-9965 - Deleting `
  • ` elements that only contained `
    ` tags sometimes caused a crash. #TINY-6888 - It was possible to remove the `` element from a `
    ` element by dragging and dropping. #TINY-9960 - It was possible to break `` elements if content containing block elements was dragged-and-dropped inside them. #TINY-9960 - Contents were not removed from the drag start source if dragging and dropping internally into a transparent block element. #TINY-9960 - Using the Media plugin unexpectedly changed ` Githubissues.
  • Githubissues is a development platform for aggregating issues.