@ckeditor/ckeditor5-engine 48.5.0-alpha.7 → 48.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE.md +1 -1
- package/dist/index.js +7 -1
- package/dist/index.js.map +1 -1
- package/package.json +3 -3
package/LICENSE.md
CHANGED
|
@@ -18,7 +18,7 @@ Where not otherwise indicated, all CKEditor 5 content is authored by CKSour
|
|
|
18
18
|
|
|
19
19
|
The following libraries are included in CKEditor 5 under the [MIT license](https://opensource.org/licenses/MIT):
|
|
20
20
|
|
|
21
|
-
* es-toolkit - Copyright (c) 2024 Viva Republica, Inc
|
|
21
|
+
* es-toolkit - Copyright (c) 2024 Viva Republica, Inc.
|
|
22
22
|
|
|
23
23
|
Trademarks
|
|
24
24
|
----------
|
package/dist/index.js
CHANGED
|
@@ -8627,7 +8627,13 @@ var ViewDomConverter = class {
|
|
|
8627
8627
|
if (attributeKey === "srcdoc") return false;
|
|
8628
8628
|
if (elementName === "img" && (attributeKey === "src" || attributeKey === "srcset")) return true;
|
|
8629
8629
|
if (elementName === "source" && attributeKey === "srcset") return true;
|
|
8630
|
-
|
|
8630
|
+
attributeValue = attributeValue.replace(/[\s\u0000-\u0020]+/g, "");
|
|
8631
|
+
if (attributeValue.match(/^javascript:/i)) return false;
|
|
8632
|
+
if (attributeValue.match(/^data:/i)) {
|
|
8633
|
+
const isImage = attributeValue.match(/^data:image\/(png|jpeg|jpg|gif|webp|avif|bmp|x-icon|vnd\.microsoft\.icon|apng|tiff|heic|heif|jxl)($|[;,])/i);
|
|
8634
|
+
const isMedia = attributeValue.match(/^data:(audio|video)\/(mp4|mpeg|mp3|ogg|webm|wav|x-wav|aac|flac|quicktime|3gpp)($|[;,])/i);
|
|
8635
|
+
if (!isImage && !isMedia) return false;
|
|
8636
|
+
}
|
|
8631
8637
|
return true;
|
|
8632
8638
|
}
|
|
8633
8639
|
/**
|