MendDemo-josh / Umbraco-CMS

The simple, flexible and friendly ASP.NET CMS used by more than 730.000 websites
https://umbraco.com
MIT License
0 stars 0 forks source link

Update dependency tinymce to v6 - autoclosed #29

Closed mend-for-github-com[bot] closed 10 months ago

mend-for-github-com[bot] commented 10 months ago

This PR contains the following updates:

Package Type Update Change
tinymce (source) dependencies major 4.9.11 -> 6.7.3

By merging this PR, the issue #7 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 WS-2021-0001
Medium Medium 6.1 CVE-2023-45818
Medium Medium 6.1 CVE-2023-45819
Medium Medium 6.1 CVE-2023-48219
Medium Medium 6.1 WS-2021-0025
Medium Medium 6.1 WS-2021-0133
Medium Medium 6.1 WS-2021-0406
Medium Medium 6.1 WS-2021-0413

Release Notes

tinymce/tinymce ### [`v6.7.3`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​673---2023-11-15) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.7.2...6.7.3) ##### Changed - Zero width no-break space (U+FEFF) characters are removed from content passed to `setContent`, `insertContent`, and `resetContent` APIs. #TINY-10305 - Zero width no-break space (U+FEFF) characters in initial content are not loaded into the editor upon initialization. #TINY-10305 ##### Fixed - Specific HTML content containing unescaped text nodes caused mXSS when using undo/redo. #TINY-10305 - Specific HTML content containing unescaped text nodes caused mXSS when using the `getContent` and `setContent` APIs with the `format: 'raw'` option, which also affected the `resetContent` API and the draft restoration feature of the Autosave plugin. #TINY-10305 ### [`v6.7.2`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​672---2023-10-25) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.7.1...6.7.2) ##### Fixed - The function `getModifierState` did not work on events passed through the editor as expected. #TINY-10263 - Removed use of `async` for editor rendering which caused visual blinking when reloading the editor in-place. #TINY-10249 - Toggling a list that contains an LI element having another list as its first child would remove the remaining content within that LI element. #TINY-10213 - List items containing a list element surrounded by non list nodes would cause some list operations to fail. #TINY-10268 - The `accordion` toggling with the Enter key press would behave incorrectly on Safari. #TINY-10177 - Deleting a range that included both text of a cell and a nested table in that cell removed the entire content of the cell. #TINY-10254 ### [`v6.7.1`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​671---2023-10-19) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.7.0...6.7.1) ##### Fixed - Specific HTML content caused mXSS when using undo/redo. #TINY-10180 - Specific HTML content caused mXSS when using the `getContent` and `setContent` APIs with the `format: 'raw'` option, which also affected the `resetContent` API and the draft restoration feature of the Autosave plugin. #TINY-10236 - Notification messages containing HTML were not properly XSS sanitized before being displayed. #TINY-10286 ### [`v6.7.0`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#​670---2023-08-30) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.6.2...6.7.0) ##### Added - New `help_accessibility` option displays the keyboard shortcut to open the in-application help in the status bar. #TINY-9379 - Added a new `InsertNewBlockBefore` command which inserts an empty block before the block containing the current selection. #TINY-10022 - Added a new `InsertNewBlockAfter` command which inserts an empty block after the block containing the current selection. #TINY-10022 ##### Improved - Adding a newline after a table would, in some specific cases, not work. #TINY-9863 - Menus now have a slight margin at the top and bottom to more clearly separate them from the frame edge. #TINY-9978 - Updated **More** toolbar button tooltip text from *More...* to *Reveal or hide additional toolbar items*. #TINY-9629 - Where multiple case sensitive variants of a translation key are provided, they will now all be preserved in the translation object instead of just the lowercase variant. #TINY-10115 - Improved screen reader announcements of the column and row selection in the grid presented by the **Table** menu and toolbar item. #TINY-10140 - Improved the keyboard focus visibility for links inside dialogs. #TINY-10124 ##### Changed - Change `UndoLevelType` from `enum` to union type so that it is easier to use. #TINY-9764 - The pattern replacement removed spaces if they were contained within a tag that only contained a space and the text to replace. #TINY-9744 - If loading content CSS takes more than 500ms, the editor will be set to an *in progress* state until the CSS is ready. #TINY-10008 ##### Fixed - Applying an ordered or unordered list to a selected checklist incorrectly turned the list into paragraphs. #TINY-9975 - Returning an empty string in a custom context menu update function resulted in a small white line appearing on right-click and the browser-native context menu would not present. #TINY-9842 - For sufficiently long URLs and sufficiently wide windows, URL autocompletion hid middle portions of the URL from view. #TINY-10017 - Numeric input in toolbar items did not disable when a switching from edit to read-only mode. #TINY-10129 - The Quick Toolbars plugin showed text alignment buttons on pagebreaks. #TINY-10054 - Creating lists in empty blocks sometimes, and incorrectly, converted adjacent block elements into list items. #TINY-10136 - Creating a list from multiple `
` elements only created a partial list. #TINY-9872 - Tab navigation incorrectly stopped around `iframe` dialog components. #TINY-9815 - It was possible to delete the sole empty block immediately before a `
` element if it was nested within another `
` element. #TINY-9965 - Deleting `
  • ` elements that only contained `
    ` tags sometimes caused a crash. #TINY-6888 - It was possible to remove the `` element from a `
    ` element by dragging and dropping. #TINY-9960 - It was possible to break `` elements if content containing block elements was dragged-and-dropped inside them. #TINY-9960 - Contents were not removed from the drag start source if dragging and dropping internally into a transparent block element. #TINY-9960 - Using the Media plugin unexpectedly changed ` Githubissues.
  • Githubissues is a development platform for aggregating issues.