security concerns

[gileneusz]

Hi, I've been looking for many wysiwyg editors for vue and vueditor seems to be the best one, because it's simply blazing fast, there are no delays while typing, which is making good user experience.

However... I can't use it because it has some lacing features, which I cannot accept. For example:

• no XSS prevention (security is important for me...)
• no option to default clear format on pasting text
• no option to turn off keyboard shortcuts (just like ctrl+b, ctrl+i etc..)

Hope this comment will help your team to develop vueditor

[hifarer]

hi, thanks for feed back

1. XSS is about to arrive, but do not trust any security features in front end.
2. no format paste is ready in develop branch, and will in the next release
3. haven't thought it yet

[gileneusz]

1. great!
2. happy to hear that!
3. that's helpful issue - if you don't want user to use ctrl+b - if you don't want allow bold font