ckeditor5 1.7.0 → 1.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4325c958e2805d971859c841f0b2694490e35a7e4600e2b8bb60f35672493146
-  data.tar.gz: 23aa528bcbfbec102647898aee0fb4c064e7d16bd051fc4bf45ae94b9ed16fb6
+  metadata.gz: 18736efccfe3547f18ff9df5418fd5f93aafa426423c3ca8daca99de481c6c60
+  data.tar.gz: 6be07d38f24ba131e3a8444175b8416561706a97d74bd581d8568703ef3544f2
 SHA512:
-  metadata.gz: 7e12e3e13824889463c2500e5d26874c1dd7c1dac6c5dbf1d41b37e5bd66e25b642b92fdbcb943b4f99219302e9184bacc5c8b16902559511c69db2392e2d569
-  data.tar.gz: '090b221f5bebaedac65be2db6a230409537b891bce481258106a575a58555b59fa2a0f55b125ea114115554ecba1b2d0f80845e3b1bea14f6f743af627972810'
+  metadata.gz: c40e50c2093c7f8c311b8565a54ddc4835aba887ced1e36b4802c6681769a8f2e4f39812443e688f6e31ff4932eef76282664be82d7cdbb4b667c9febe76374f
+  data.tar.gz: f9a999fb8a325323e497b225f3c8bed54cc24befc5bcd2cc90a93a25dece1d539e5e33a34fbe2a4f9570e462527492e061819563b7fad19e61d24fae8a39953e

data/README.md

@@ -84,6 +84,7 @@ Voilà! You have CKEditor 5 integrated with your Rails application. 🎉
       - [`plugin(name, premium:, import_name:)` method](#pluginname-premium-import_name-method)
       - [`plugins(*names, **kwargs)` method](#pluginsnames-kwargs-method)
       - [`inline_plugin(name, code)` method](#inline_pluginname-code-method)
+      - [`ckeditor5_element_ref(selector)` method](#ckeditor5_element_refselector-method)
   - [Including CKEditor 5 assets 📦](#including-ckeditor-5-assets-)
     - [Format 📝](#format-)
       - [Using default preset](#using-default-preset)
@@ -445,7 +446,9 @@ end
 
 #### `configure(name, value)` method
 
-Allows you to set custom configuration options. You can pass the name of the option and its value as arguments. The example below show how to set the default protocol for the link plugin to `https://`:
+Allows you to set custom configuration options. You can pass the name of the option and its value as arguments. The [`ckeditor5_element_ref(selector)` helper](#ckeditor5_element_refselector-method) allows you to reference DOM elements that will be used by the editor's features. It's particularly useful for features that need to check element presence or operate on specific DOM elements.
+
+For example, you can use it to configure font family dropdown to show only fonts available in specific elements:
 
 ```rb
 # config/initializers/ckeditor5.rb
@@ -453,8 +456,19 @@ Allows you to set custom configuration options. You can pass the name of the opt
 CKEditor5::Rails.configure do
   # ... other configuration
 
-  configure :link, {
-    defaultProtocol: 'https://'
+  configure :fontFamily, {
+    supportAllValues: true,
+    options: [
+      'default',
+      'Arial, Helvetica, sans-serif',
+      'Courier New, Courier, monospace',
+      'Georgia, serif',
+      'Lucida Sans Unicode, Lucida Grande, sans-serif',
+      'Tahoma, Geneva, sans-serif',
+      'Times New Roman, Times, serif',
+      'Trebuchet MS, Helvetica, sans-serif',
+      'Verdana, Geneva, sans-serif'
+    ]
   }
 end
 ```
@@ -538,6 +552,23 @@ CKEditor5::Rails.configure do
   JS
 end
 ```
+
+#### `ckeditor5_element_ref(selector)` method
+
+Defines a reference to a CKEditor 5 element. In other words, it allows you to reference DOM elements that will be used by the editor's features. It's particularly useful for features that need to check element presence or operate on specific DOM elements. The primary example is the `presence list` feature that requires a reference to the element that will be used to display the list.
+
+```rb
+# config/initializers/ckeditor5.rb
+
+CKEditor5::Rails.configure do
+  # ... other configuration
+
+  configure :yourPlugin, {
+      element: ckeditor5_element_ref("body")
+  }
+end
+```
+
 </details>
 
 ## Including CKEditor 5 assets 📦

data/lib/ckeditor5/rails/assets/webcomponent.mjs

@@ -132,6 +132,72 @@ class CKEditorComponent extends HTMLElement {
     }
   }
 
+  /**
+   * Resolves element references in configuration object.
+   * Looks for objects with { $element: "selector" } format and replaces them with actual elements.
+   *
+   * @private
+   * @param {Object} obj - Configuration object to process
+   * @returns {Object} Processed configuration object with resolved element references
+   */
+  #resolveElementReferences(obj) {
+    if (!obj || typeof obj !== 'object') {
+      return obj;
+    }
+
+    if (Array.isArray(obj)) {
+      return obj.map(item => this.#resolveElementReferences(item));
+    }
+
+    const result = Object.create(null);
+
+    for (const key of Object.getOwnPropertyNames(obj)) {
+      if (!isSafeKey(key)) {
+        console.warn(`Suspicious key "${key}" detected in config, skipping`);
+        continue;
+      }
+
+      const value = obj[key];
+
+      if (value && typeof value === 'object') {
+        if (value.$element) {
+          const selector = value.$element;
+
+          if (typeof selector !== 'string') {
+            console.warn(`Invalid selector type for "${key}", expected string`);
+            continue;
+          }
+
+          const element = document.querySelector(selector);
+
+          if (!element) {
+            console.warn(`Element not found for selector: ${selector}`);
+          }
+
+          result[key] = element || null;
+        } else {
+          result[key] = this.#resolveElementReferences(value);
+        }
+      } else {
+        result[key] = value;
+      }
+    }
+
+    return result;
+  }
+
+  /**
+   * Gets editor configuration with resolved element references
+   *
+   * @private
+   * @returns {EditorConfig}
+   */
+  #getConfig() {
+    const config = JSON.parse(this.getAttribute('config') || '{}');
+
+    return this.#resolveElementReferences(config);
+  }
+
   /**
    * Creates a new CKEditor instance
    *
@@ -273,16 +339,6 @@ class CKEditorComponent extends HTMLElement {
     return this.getAttribute('watchdog') === 'true';
   }
 
-  /**
-   * Parses editor configuration from config attribute
-   *
-   * @private
-   * @returns {EditorConfig}
-   */
-  #getConfig() {
-    return JSON.parse(this.getAttribute('config') || '{}');
-  }
-
   /**
    * Queries and validates editable elements
    *
@@ -824,6 +880,20 @@ function loadAsyncImports(imports = []) {
   }));
 }
 
+
+/**
+ * Checks if a key is safe to use in configuration objects to prevent prototype pollution.
+ *
+ * @param {string} key - Key name to check
+ * @returns {boolean} True if key is safe to use.
+ */
+function isSafeKey(key) {
+  return typeof key === 'string' &&
+          key !== '__proto__' &&
+          key !== 'constructor' &&
+          key !== 'prototype';
+}
+
 customElements.define('ckeditor-component', CKEditorComponent);
 customElements.define('ckeditor-editable-component', CKEditorEditableComponent);
 customElements.define('ckeditor-ui-part-component', CKEditorUIPartComponent);

data/lib/ckeditor5/rails/editor/config_helpers.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+module CKEditor5::Rails
+  module Editor::ConfigHelpers
+    def ckeditor5_element_ref(selector)
+      { '$element': selector }
+    end
+  end
+end

data/lib/ckeditor5/rails/editor/helpers.rb

@@ -3,9 +3,12 @@
 require_relative 'props_plugin'
 require_relative 'props_inline_plugin'
 require_relative 'props'
+require_relative 'config_helpers'
 
 module CKEditor5::Rails
   module Editor::Helpers
+    include Editor::ConfigHelpers
+
     class EditorContextError < StandardError; end
     class PresetNotFoundError < ArgumentError; end
     class InvalidEditableHeightError < ArgumentError; end

data/lib/ckeditor5/rails/presets/preset_builder.rb

@@ -3,6 +3,8 @@
 module CKEditor5::Rails
   module Presets
     class PresetBuilder
+      include Editor::ConfigHelpers
+
       attr_reader :config
 
       def initialize

data/lib/ckeditor5/rails/version.rb

@@ -2,6 +2,6 @@
 
 module CKEditor5
   module Rails
-    VERSION = '1.7.0'
+    VERSION = '1.8.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ckeditor5
 version: !ruby/object:Gem::Version
-  version: 1.7.0
+  version: 1.8.0
 platform: ruby
 authors:
 - Mateusz Bagiński
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-12 00:00:00.000000000 Z
+date: 2024-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -51,6 +51,7 @@ files:
 - lib/ckeditor5/rails/cdn/helpers.rb
 - lib/ckeditor5/rails/cdn/url_generator.rb
 - lib/ckeditor5/rails/cloud/helpers.rb
+- lib/ckeditor5/rails/editor/config_helpers.rb
 - lib/ckeditor5/rails/editor/helpers.rb
 - lib/ckeditor5/rails/editor/props.rb
 - lib/ckeditor5/rails/editor/props_inline_plugin.rb