Update ckeditor.js to prevent XSS vulnerability - Githubissues

codeslayer1 / react-ckeditor

CKEditor component for React with plugin and custom event listeners support

MIT License

129 stars 34 forks source link

Update ckeditor.js to prevent XSS vulnerability #83

Open samism91 opened 3 years ago

samism91 commented 3 years ago

For CKEditor 4.6.2 version, XSS vulnerability is there: https://snyk.io/vuln/npm:ckeditor@4.6.2 So changing defaultScriptUrl from https://cdn.ckeditor.com/4.6.2/standard/ckeditor.js to https://cdn.ckeditor.com/4.12.1/standard/ckeditor.js