@ckeditor/ckeditor5-link 41.1.0 → 41.2.0

package/lang/translations/ne.po

@@ -52,3 +52,11 @@ msgstr "नयाँ ट्याबमा खोल्न"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "डाउनलोड योग्य"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/nl.po

@@ -52,3 +52,11 @@ msgstr "Open een nieuw tabblad"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Downloadbaar"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Creëer link"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Uit een link gaan"

package/lang/translations/no.po

@@ -52,3 +52,11 @@ msgstr "Åpne i ny fane"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Nedlastbar"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Opprett lenke"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Flytt ut fra en lenke"

package/lang/translations/pl.po

@@ -52,3 +52,11 @@ msgstr "Otwórz w nowej zakładce"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Do pobrania"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Tworzy link"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Umożliwia wyjście z linku"

package/lang/translations/pt-br.po

@@ -52,3 +52,11 @@ msgstr "Abrir em nova aba"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Pode ser baixado"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Criar link"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Sair de um link"

package/lang/translations/pt.po

@@ -31,19 +31,19 @@ msgstr "URL da ligação"
 
 msgctxt "Label for the image link button."
 msgid "Link image"
-msgstr "Adicionar link a imagem"
+msgstr "Imagem da hiperligação"
 
 msgctxt "Button opening the Link URL editing balloon."
 msgid "Edit link"
-msgstr "Editar link"
+msgstr "Editar hiperligação"
 
 msgctxt "Button opening the link in new browser tab."
 msgid "Open link in new tab"
-msgstr "Abrir link num novo separador"
+msgstr "Abrir hiperligação num novo separador"
 
 msgctxt "Label explaining that a link has no URL set (the URL is empty)."
 msgid "This link has no URL"
-msgstr "Este link não tem URL"
+msgstr "Esta hiperligação não tem URL"
 
 msgctxt "The label of the switch button that controls whether the edited link will open in a new tab."
 msgid "Open in a new tab"
@@ -52,3 +52,11 @@ msgstr "Abrir num novo separador"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Descarregável"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Criar ligação"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Sair de uma ligação"

package/lang/translations/ro.po

@@ -52,3 +52,11 @@ msgstr "Deschide în tab nou"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Descărcabil"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Crearea unui link"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Ieșire dintr-un link"

package/lang/translations/ru.po

@@ -52,3 +52,11 @@ msgstr "Открыть в новой вкладке"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Загружаемые"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Создать ссылку"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Выйти из ссылки"

package/lang/translations/sk.po

@@ -52,3 +52,11 @@ msgstr "Otvoriť v novej záložke"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Na stiahnutie"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Vytvoriť odkaz"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Presunúť sa mimo odkazu"

package/lang/translations/sq.po

@@ -52,3 +52,11 @@ msgstr "Hape në një fletë të re"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "E shkarkueshme"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/sr-latn.po

@@ -52,3 +52,11 @@ msgstr "Otvori u novoj kartici"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Moguće preuzimanje"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/sr.po

@@ -52,3 +52,11 @@ msgstr "Отвори у новој картици"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Могуће преузимање"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Napravi vezu"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Idi sa veze"

package/lang/translations/sv.po

@@ -52,3 +52,11 @@ msgstr "Öppna i en ny flik"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Nedladdningsbar"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Skapa länk"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Flytta bort från länken"

package/lang/translations/th.po

@@ -52,3 +52,11 @@ msgstr "เปิดในแท็บใหม่"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "ที่สามารถดาวน์โหลดได้"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "สร้างลิงก์"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "ย้ายออกจากลิงก์"

package/lang/translations/tk.po

@@ -52,3 +52,11 @@ msgstr "Täze goýmada açyň"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Göçürip alyp bolýar"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/tr.po

@@ -52,3 +52,11 @@ msgstr "Yeni sekmede aç"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "İndirilebilir"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Bağlantı oluştur"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Bir bağlantıdan çık"

package/lang/translations/tt.po

@@ -52,3 +52,11 @@ msgstr ""
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/ug.po

@@ -52,3 +52,11 @@ msgstr "يېڭى بەتكۈچتە ئاچ"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "چۈشۈرۈشچان"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/uk.po

@@ -52,3 +52,11 @@ msgstr "Вікрити у новій вкладці"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Завантажувальне"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Створити посилання"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Вийти з посилання"

package/lang/translations/ur.po

@@ -52,3 +52,11 @@ msgstr "نئی ٹیب کھولیں"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "ڈاؤنلوڈ ہو سکتا ہے"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/uz.po

@@ -52,3 +52,11 @@ msgstr "Yangi oynada oching"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Yuklab olinadigan"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr ""
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr ""

package/lang/translations/vi.po

@@ -52,3 +52,11 @@ msgstr "Mở trên tab mới"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "Có thể tải về"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "Tạo liên kết"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "Di chuyển ra khỏi một liên kết"

package/lang/translations/zh-cn.po

@@ -52,3 +52,11 @@ msgstr "在新标签页中打开"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "可下载"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "创建链接"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "移出链接"

package/lang/translations/zh.po

@@ -52,3 +52,11 @@ msgstr "在新視窗開啟"
 msgctxt "The label of the switch button that controls whether the edited link refers to downloadable resource."
 msgid "Downloadable"
 msgstr "可下載"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for creating a link."
+msgid "Create link"
+msgstr "建立連結"
+
+msgctxt "Keystroke description for assistive technologies: keystroke for moving out of a link."
+msgid "Move out of a link"
+msgstr "移出連結"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ckeditor/ckeditor5-link",
-  "version": "41.1.0",
+  "version": "41.2.0",
   "description": "Link feature for CKEditor 5.",
   "keywords": [
     "ckeditor",
@@ -13,8 +13,8 @@
   "type": "module",
   "main": "src/index.js",
   "dependencies": {
-    "@ckeditor/ckeditor5-ui": "41.1.0",
-    "ckeditor5": "41.1.0",
+    "@ckeditor/ckeditor5-ui": "41.2.0",
+    "ckeditor5": "41.2.0",
     "lodash-es": "4.17.21"
   },
   "author": "CKSource (http://cksource.com/)",

package/src/linkconfig.d.ts

@@ -43,6 +43,26 @@ export interface LinkConfig {
      * **NOTE:** If no configuration is provided, the editor will not auto-fix the links.
      */
     defaultProtocol?: string;
+    /**
+     * This is a protocols whitelist that can be used in links, defined as an array of strings.
+     * When not set, the editor will use a default list of allowed protocols.
+     *
+     * **Note:** Use this with caution and at your own risk - adding unsafe protocols like `javascript:`
+     * can result in serious security vulnerabilities!
+     *
+     * ```ts
+     * ClassicEditor
+     * 	.create( editorElement, {
+     * 		link: {
+     * 			allowedProtocols: [ 'http', 'https', 'ftp', 'tel', 'mailto', 'ssh' ]
+     * 		}
+     * 	} )
+     * 	.then( ... )
+     * 	.catch( ... );
+     * ```
+     *
+     */
+    allowedProtocols?: Array<string>;
     /**
      * When set to `true`, the form will accept an empty value in the URL field, creating a link with an empty `href` (`<a href="">`).
      *

package/src/linkediting.js

@@ -53,13 +53,14 @@ export default class LinkEditing extends Plugin {
      */
     init() {
         const editor = this.editor;
+        const allowedProtocols = this.editor.config.get('link.allowedProtocols');
         // Allow link attribute on all inline nodes.
         editor.model.schema.extend('$text', { allowAttributes: 'linkHref' });
         editor.conversion.for('dataDowncast')
             .attributeToElement({ model: 'linkHref', view: createLinkElement });
         editor.conversion.for('editingDowncast')
             .attributeToElement({ model: 'linkHref', view: (href, conversionApi) => {
-                return createLinkElement(ensureSafeUrl(href), conversionApi);
+                return createLinkElement(ensureSafeUrl(href, allowedProtocols), conversionApi);
             } });
         editor.conversion.for('upcast')
             .elementToAttribute({

package/src/linkui.js

@@ -49,6 +49,7 @@ export default class LinkUI extends Plugin {
      */
     init() {
         const editor = this.editor;
+        const t = this.editor.t;
         editor.editing.view.addObserver(ClickObserver);
         this._balloon = editor.plugins.get(ContextualBalloon);
         // Create toolbar buttons.
@@ -69,6 +70,22 @@ export default class LinkUI extends Plugin {
                 classes: ['ck-fake-link-selection', 'ck-fake-link-selection_collapsed']
             }
         });
+        // Add the information about the keystrokes to the accessibility database.
+        editor.accessibility.addKeystrokeInfos({
+            keystrokes: [
+                {
+                    label: t('Create link'),
+                    keystroke: LINK_KEYSTROKE
+                },
+                {
+                    label: t('Move out of a link'),
+                    keystroke: [
+                        ['arrowleft', 'arrowleft'],
+                        ['arrowright', 'arrowright']
+                    ]
+                }
+            ]
+        });
     }
     /**
      * @inheritDoc
@@ -97,7 +114,7 @@ export default class LinkUI extends Plugin {
      */
     _createActionsView() {
         const editor = this.editor;
-        const actionsView = new LinkActionsView(editor.locale);
+        const actionsView = new LinkActionsView(editor.locale, editor.config.get('link'));
         const linkCommand = editor.commands.get('link');
         const unlinkCommand = editor.commands.get('unlink');
         actionsView.bind('href').to(linkCommand, 'value');

package/src/ui/linkactionsview.d.ts

@@ -9,6 +9,7 @@ import { ButtonView, View } from 'ckeditor5/src/ui.js';
 import { FocusTracker, KeystrokeHandler, type LocaleTranslate, type Locale } from 'ckeditor5/src/utils.js';
 import '@ckeditor/ckeditor5-ui/theme/components/responsive-form/responsiveform.css';
 import '../../theme/linkactions.css';
+import type { LinkConfig } from '../linkconfig.js';
 /**
  * The link actions view class. This view displays the link preview, allows
  * unlinking or editing the link.
@@ -48,11 +49,12 @@ export default class LinkActionsView extends View {
      * Helps cycling over {@link #_focusables} in the view.
      */
     private readonly _focusCycler;
+    private readonly _linkConfig;
     t: LocaleTranslate;
     /**
      * @inheritDoc
      */
-    constructor(locale: Locale);
+    constructor(locale: Locale, linkConfig?: LinkConfig);
     /**
      * @inheritDoc
      */

package/src/ui/linkactionsview.js

@@ -22,7 +22,7 @@ export default class LinkActionsView extends View {
     /**
      * @inheritDoc
      */
-    constructor(locale) {
+    constructor(locale, linkConfig = {}) {
         super(locale);
         /**
          * Tracks information about DOM focus in the actions.
@@ -41,6 +41,7 @@ export default class LinkActionsView extends View {
         this.unlinkButtonView = this._createButton(t('Unlink'), unlinkIcon, 'unlink');
         this.editButtonView = this._createButton(t('Edit link'), icons.pencil, 'edit');
         this.set('href', undefined);
+        this._linkConfig = linkConfig;
         this._focusCycler = new FocusCycler({
             focusables: this._focusables,
             focusTracker: this.focusTracker,
@@ -140,7 +141,7 @@ export default class LinkActionsView extends View {
                     'ck',
                     'ck-link-actions__preview'
                 ],
-                href: bind.to('href', href => href && ensureSafeUrl(href)),
+                href: bind.to('href', href => href && ensureSafeUrl(href, this._linkConfig.allowedProtocols)),
                 target: '_blank',
                 rel: 'noopener noreferrer'
             }

package/src/utils.d.ts

@@ -29,7 +29,7 @@ export declare function createLinkElement(href: string, { writer }: DowncastConv
  *
  * @internal
  */
-export declare function ensureSafeUrl(url: unknown): string;
+export declare function ensureSafeUrl(url: unknown, allowedProtocols?: Array<string>): string;
 /**
  * Returns the {@link module:link/linkconfig~LinkConfig#decorators `config.link.decorators`} configuration processed
  * to respect the locale of the editor, i.e. to display the {@link module:link/linkconfig~LinkDecoratorManualDefinition label}

package/src/utils.js

@@ -4,12 +4,17 @@
  */
 import { upperFirst } from 'lodash-es';
 const ATTRIBUTE_WHITESPACES = /[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205f\u3000]/g; // eslint-disable-line no-control-regex
-const SAFE_URL = /^(?:(?:https?|ftps?|mailto):|[^a-z]|[a-z+.-]+(?:[^a-z+.:-]|$))/i;
+const SAFE_URL_TEMPLATE = '^(?:(?:<protocols>):|[^a-z]|[a-z+.-]+(?:[^a-z+.:-]|$))';
 // Simplified email test - should be run over previously found URL.
 const EMAIL_REG_EXP = /^[\S]+@((?![-_])(?:[-\w\u00a1-\uffff]{0,63}[^-_]\.))+(?:[a-z\u00a1-\uffff]{2,})$/i;
 // The regex checks for the protocol syntax ('xxxx://' or 'xxxx:')
 // or non-word characters at the beginning of the link ('/', '#' etc.).
 const PROTOCOL_REG_EXP = /^((\w+:(\/{2,})?)|(\W))/i;
+const DEFAULT_LINK_PROTOCOLS = [
+    'https?',
+    'ftps?',
+    'mailto'
+];
 /**
  * A keystroke used by the {@link module:link/linkui~LinkUI link UI feature}.
  */
@@ -38,16 +43,18 @@ export function createLinkElement(href, { writer }) {
  *
  * @internal
  */
-export function ensureSafeUrl(url) {
+export function ensureSafeUrl(url, allowedProtocols = DEFAULT_LINK_PROTOCOLS) {
     const urlString = String(url);
-    return isSafeUrl(urlString) ? urlString : '#';
+    const protocolsList = allowedProtocols.join('|');
+    const customSafeRegex = new RegExp(`${SAFE_URL_TEMPLATE.replace('<protocols>', protocolsList)}`, 'i');
+    return isSafeUrl(urlString, customSafeRegex) ? urlString : '#';
 }
 /**
  * Checks whether the given URL is safe for the user (does not contain any malicious code).
  */
-function isSafeUrl(url) {
+function isSafeUrl(url, customRegexp) {
     const normalizedUrl = url.replace(ATTRIBUTE_WHITESPACES, '');
-    return !!normalizedUrl.match(SAFE_URL);
+    return !!normalizedUrl.match(customRegexp);
 }
 /**
  * Returns the {@link module:link/linkconfig~LinkConfig#decorators `config.link.decorators`} configuration processed