@instructure/canvas-rce 5.15.6 → 6.0.0

package/CHANGELOG.md

@@ -5,6 +5,35 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 6.0.0 - 2025-03-20
+
+### Changed
+
+- Upgraded to Node 20 LTS
+
+### Fixed
+
+- Redirect focus on invalid save in Image Options tray
+- Whitelist the aria-description attribute
+- Flag external links when they have multi-part TLDs
+- Save changes to alt text when it is the only thing that changes
+- Screenreader reads out content inside raw HTML editor
+- Validations in Upload Media modal
+- Increased Link header size
+
+## 5.15.8 - 2025-02-20
+
+### Fixed
+
+- Fixed invalid `querySelectorAll` selector (`:not(.not_external, .external)`)
+  that caused errors in older Chrome versions (87 and below). Updated to
+  `:not(.not_external):not(.external)` for improved browser compatibility
+- Improved external link handling logic in canvas-rce
+
+### Added
+
+- Jest test to ensure the fix does not introduce regressions
+
 ## 5.15.0 - 2025-02-12
 
 - Lazy load iframe and images by default

package/Dockerfile

@@ -1,4 +1,4 @@
-FROM instructure/node:18
+FROM instructure/node:20
 
 ARG NPM_PRIVATE_SCOPE
 ARG NPM_PRIVATE_REGISTRY

package/es/bridge/Bridge.d.ts

@@ -31,6 +31,9 @@ export default class Bridge {
             ADDED_CAPTION: string;
             DELETED_CAPTION: string;
             PROGRESS_LABEL: string;
+            SELECT_SUPPORTED_FILE_TYPE: string;
+            CHOOSE_FILE_TO_UPLOAD: string;
+            ENTER_FILE_NAME: string;
         };
         SelectStrings: {
             USE_ARROWS: string;
@@ -113,6 +116,9 @@ export default class Bridge {
             ADDED_CAPTION: string;
             DELETED_CAPTION: string;
             PROGRESS_LABEL: string;
+            SELECT_SUPPORTED_FILE_TYPE: string;
+            CHOOSE_FILE_TO_UPLOAD: string;
+            ENTER_FILE_NAME: string;
         };
         SelectStrings: {
             USE_ARROWS: string;

package/es/defaultTinymceConfig.js

@@ -16,6 +16,23 @@
  * with this program. If not, see <http://www.gnu.org/licenses/>.
  */
 
+function elemsToTinyStringConfig(list) {
+  return Object.entries(list).map(pair => {
+    const [tag, attrs] = pair;
+    if (attrs.length === 0) {
+      return tag;
+    } else {
+      const attrStr = attrs.map(attr => {
+        if (typeof attr === 'string') {
+          return attr;
+        } else if (typeof attr === 'object') {
+          return Object.entries(attr).map(([key, value]) => `${key}=${value}`);
+        }
+      }).join('|');
+      return `${tag}[${attrStr}]`;
+    }
+  }).join();
+}
 const defaultTinymceConfig = {
   // ============================================================================
   // Values in this section have acceptable defaults which you may want
@@ -73,10 +90,154 @@ const defaultTinymceConfig = {
   // then edited.
   //
   // this list needs to be kept in sync with the list in gems/canvas_sanitize/lib/canvas_sanitize/canvas_sanitize.rb
-  valid_elements: '@[id|class|style|title|dir<ltr?rtl|lang|xml::lang|role],a[rel|rev|charset|hreflang|tabindex|accesskey|type|name|href|target|title|class|data-old-link],strong/b,em/i,strike/s,u,#p,-ol[type|compact],-ul[type|compact],-li,br,img[longdesc|usemap|src|border|alt|title|hspace|vspace|width|height|align|role|data-old-link],-sub,-sup,-blockquote[cite],-table[border=0|cellspacing|cellpadding|width|frame|rules|height|align|summary|bgcolor|background|bordercolor],-tr[rowspan|width|height|align|valign|bgcolor|background|bordercolor],tbody,thead,tfoot,#td[colspan|rowspan|width|height|align|valign|bgcolor|background|bordercolor|scope],#th[colspan|rowspan|width|height|align|valign|scope],caption,-div,-span,-code,-pre,address,-h1,-h2,-h3,-h4,-h5,-h6,hr[size|noshade],-font[face|size|color],dd,dl,dt,cite,abbr,acronym,del[datetime|cite],ins[datetime|cite],object[classid|width|height|codebase|*],param[name|value|_value],embed[type|width|height|src|*],map[name],area[shape|coords|href|alt|target],bdo,col[align|char|charoff|span|valign|width],colgroup[align|char|charoff|span|valign|width],dfn,kbd,q[cite],samp,small,tt,var,big,figure,figcaption,source[media|width|height|sizes|src|srcset|type|data-old-link],track,mark,article,aside,details,footer,header,nav,section,summary,time',
-  extended_valid_elements: '@[id|accesskey|class|dir|lang|style|tabindex|title|contenteditable|contextmenu|draggable|dropzone|hidden|longdesc|spellcheck|translate|align|role|aria-labelledby|aria-atomic|aria-busy|aria-controls|aria-describedby|aria-disabled|aria-dropeffect|aria-flowto|aria-grabbed|aria-haspopup|aria-hidden|aria-invalid|aria-label|aria-labelledby|aria-live|aria-owns|aria-relevant|aria-autocomplete|aria-checked|aria-disabled|aria-expanded|aria-haspopup|aria-hidden|aria-invalid|aria-label|aria-level|aria-multiline|aria-multiselectable|aria-orientation|aria-pressed|aria-readonly|aria-required|aria-selected|aria-sort|aria-valuemax|aria-valuemin|aria-valuenow|aria-valuetext],iframe[id|data-media-type|title|src|width|height|name|align|style|class|sandbox|loading|allowfullscreen|webkitallowfullscreen|mozallowfullscreen|allow|data-old-link],i[iclass],a[hidden|href|target|rel|media|hreflang|type|charset|name|rev|shape|coords|download|alt],#p,li[value],-ol[reversed|start|type|compact],pre[width],table[border|summary|width|frame|rules|cellspacing|cellpadding|bgcolor],tbody[char|charoff|valign],td[colspan|rowspan|headers|abbr|axis|scope|align|char|charoff|valign|nowrap|bgcolor|width|height],tfoot[char|charoff|valign],th[colspan|rowspan|headers|scope|abbr|axis|align|char|charoff|valign|nowrap|bgcolor|width|height],thead[char|charoff|valign],tr[char|charoff|valign|bgcolor],-ul[compact],video[name|src|allowfullscreen|muted|poster|width|height|controls|playsinline],audio[name|src|muted|controls],annotation[href|xref|definitionURL|encoding|cd|name|src],annotation-xml[href|xref|definitionURL|encoding|cd|name|src],maction[href|xref|mathcolor|mathbackground|actiontype|selection],maligngroup[href|xref|mathcolor|mathbackground|groupalign],malignmark[href|xref|mathcolor|mathbackground|edge],math[xmlns|href|xref|display|maxwidth|overflow|altimg|altimg-width|altimg-height|altimg-valign|alttext|cdgroup|mathcolor|mathbackground|scriptlevel|displaystyle|scriptsizemultiplier|scriptminsize|infixlinebreakstyle|decimalpoint|mathvariant|mathsize|width|height|valign|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast|depth|lquote|rquote|linethickness|munalign|denomalign|bevelled|voffset|open|close|separators|notation|subscriptshift|superscriptshift|accentunder|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|side|minlabelspacing|rowspan|columnspan|edge|stackalign|charalign|charspacing|longdivstyle|position|shift|location|crossout|length|leftoverhang|rightoverhang|mslinethickness|selection],menclose[href|xref|mathcolor|mathbackground|notation],merror[href|xref|mathcolor|mathbackground],mfenced[href|xref|mathcolor|mathbackground|open|close|separators],mfrac[href|xref|mathcolor|mathbackground|linethickness|munalign|denomalign|bevelled],mglyph[href|xref|mathcolor|mathbackground|src|alt|width|height|valign],mi[href|xref|mathcolor|mathbackground|mathvariant|mathsize],mlabeledtr[href|xref|mathcolor|mathbackground],mlongdiv[href|xref|mathcolor|mathbackground|longdivstyle|align|stackalign|charalign|charspacing],mmultiscripts[href|xref|mathcolor|mathbackground|subscriptshift|superscriptshift],mn[href|xref|mathcolor|mathbackground|mathvariant|mathsize],mo[href|xref|mathcolor|mathbackground|mathvariant|mathsize|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast],mover[href|xref|mathcolor|mathbackground|accent|align],mpadded[href|xref|mathcolor|mathbackground|height|depth|width|lspace|voffset],mphantom[href|xref|mathcolor|mathbackground],mprescripts[href|xref|mathcolor|mathbackground],mroot[href|xref|mathcolor|mathbackground],mrow[href|xref|mathcolor|mathbackground],ms[href|xref|mathcolor|mathbackground|mathvariant|mathsize|lquote|rquote],mscarries[href|xref|mathcolor|mathbackground|position|location|crossout|scriptsizemultiplier],mscarry[href|xref|mathcolor|mathbackground|location|crossout],msgroup[href|xref|mathcolor|mathbackground|position|shift],msline[href|xref|mathcolor|mathbackground|position|length|leftoverhang|rightoverhang|mslinethickness],mspace[href|xref|mathcolor|mathbackground|mathvariant|mathsize],msqrt[href|xref|mathcolor|mathbackground],msrow[href|xref|mathcolor|mathbackground|position],mstack[href|xref|mathcolor|mathbackground|align|stackalign|charalign|charspacing],mstyle[href|xref|mathcolor|mathbackground|scriptlevel|displaystyle|scriptsizemultiplier|scriptminsize|infixlinebreakstyle|decimalpoint|mathvariant|mathsize|width|height|valign|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast|depth|lquote|rquote|linethickness|munalign|denomalign|bevelled|voffset|open|close|separators|notation|subscriptshift|superscriptshift|accentunder|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|side|minlabelspacing|rowspan|columnspan|edge|stackalign|charalign|charspacing|longdivstyle|position|shift|location|crossout|length|leftoverhang|rightoverhang|mslinethickness|selection],msub[href|xref|mathcolor|mathbackground|subscriptshift],msubsup[href|xref|mathcolor|mathbackground|subscriptshift|superscriptshift],msup[href|xref|mathcolor|mathbackground|superscriptshift],mtable[href|xref|mathcolor|mathbackground|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|width|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|displaystyle|side|minlabelspacing],mtd[href|xref|mathcolor|mathbackground|rowspan|columnspan|rowalign|columnalign|groupalign],mtext[href|xref|mathcolor|mathbackground|mathvariant|mathsize|width|height|depth|linebreak],mtr[href|xref|mathcolor|mathbackground|rowalign|columnalign|groupalign],munder[href|xref|mathcolor|mathbackground|accentunder|align],munderover[href|xref|mathcolor|mathbackground|accent|accentunder|align],none[href|xref|mathcolor|mathbackground],semantics[href|xref|definitionURL|encoding],picture,ruby,rp,rt,wbr' +
-  // the svg necessary for the uploading placeholder's spinner
-  'svg[*],g[*],circle[*]',
+  valid_elements: elemsToTinyStringConfig({
+    '@': ['id', 'class', 'style', 'title', 'dir<ltr?rtl', 'lang', 'xml::lang', 'role'],
+    'a': ['rel', 'rev', 'charset', 'hreflang', 'tabindex', 'accesskey', 'type', 'name', 'href', 'target', 'title', 'class', 'data-old-link'],
+    'strong/b': [],
+    'em/i': [],
+    'strike/s': [],
+    'u': [],
+    '#p': [],
+    '-ol': ['type', 'compact'],
+    '-ul': ['type', 'compact'],
+    '-li': [],
+    'br': [],
+    'img': ['longdesc', 'usemap', 'src', 'border', 'alt', 'title', 'hspace', 'vspace', 'width', 'height', 'align', 'role', 'data-old-link'],
+    '-sub': [],
+    '-sup': [],
+    '-blockquote': ['cite'],
+    '-table': [{
+      'border': '0'
+    }, 'cellspacing', 'cellpadding', 'width', 'frame', 'rules', 'height', 'align', 'summary', 'bgcolor', 'background', 'bordercolor'],
+    '-tr': ['rowspan', 'width', 'height', 'align', 'valign', 'bgcolor', 'background', 'bordercolor'],
+    'tbody': [],
+    'thead': [],
+    'tfoot': [],
+    '#td': ['colspan', 'rowspan', 'width', 'height', 'align', 'valign', 'bgcolor', 'background', 'bordercolor', 'scope'],
+    '#th': ['colspan', 'rowspan', 'width', 'height', 'align', 'valign', 'scope'],
+    'caption': [],
+    '-div': [],
+    '-span': [],
+    '-code': [],
+    '-pre': [],
+    'address': [],
+    '-h1': [],
+    '-h2': [],
+    '-h3': [],
+    '-h4': [],
+    '-h5': [],
+    '-h6': [],
+    'hr': ['size', 'noshade'],
+    '-font': ['face', 'size', 'color'],
+    'dd': [],
+    'dl': [],
+    'dt': [],
+    'cite': [],
+    'abbr': [],
+    'acronym': [],
+    'del': ['datetime', 'cite'],
+    'ins': ['datetime', 'cite'],
+    'object': ['classid', 'width', 'height', 'codebase', '*'],
+    'param': ['name', 'value', '_value'],
+    'embed': ['type', 'width', 'height', 'src', '*'],
+    'map': ['name'],
+    'area': ['shape', 'coords', 'href', 'alt', 'target'],
+    'bdo': [],
+    'col': ['align', 'char', 'charoff', 'span', 'valign', 'width'],
+    'colgroup': ['align', 'char', 'charoff', 'span', 'valign', 'width'],
+    'dfn': [],
+    'kbd': [],
+    'q': ['cite'],
+    'samp': [],
+    'small': [],
+    'tt': [],
+    'var': [],
+    'big': [],
+    'figure': [],
+    'figcaption': [],
+    'source': ['media', 'width', 'height', 'sizes', 'src', 'srcset', 'type', 'data-old-link'],
+    'track': [],
+    'mark': [],
+    'article': [],
+    'aside': [],
+    'details': [],
+    'footer': [],
+    'header': [],
+    'nav': [],
+    'section': [],
+    'summary': [],
+    'time': []
+  }),
+  extended_valid_elements: elemsToTinyStringConfig({
+    '@': ['id', 'accesskey', 'class', 'dir', 'lang', 'style', 'tabindex', 'title', 'contenteditable', 'contextmenu', 'draggable', 'dropzone', 'hidden', 'longdesc', 'spellcheck', 'translate', 'align', 'role', 'aria-labelledby', 'aria-atomic', 'aria-busy', 'aria-controls', 'aria-describedby', 'aria-description', 'aria-disabled', 'aria-dropeffect', 'aria-flowto', 'aria-grabbed', 'aria-haspopup', 'aria-hidden', 'aria-invalid', 'aria-label', 'aria-labelledby', 'aria-live', 'aria-owns', 'aria-relevant', 'aria-autocomplete', 'aria-checked', 'aria-disabled', 'aria-expanded', 'aria-haspopup', 'aria-hidden', 'aria-invalid', 'aria-label', 'aria-level', 'aria-multiline', 'aria-multiselectable', 'aria-orientation', 'aria-pressed', 'aria-readonly', 'aria-required', 'aria-selected', 'aria-sort', 'aria-valuemax', 'aria-valuemin', 'aria-valuenow', 'aria-valuetext'],
+    'iframe': ['id', 'data-media-type', 'title', 'src', 'width', 'height', 'name', 'align', 'style', 'class', 'sandbox', 'loading', 'allowfullscreen', 'webkitallowfullscreen', 'mozallowfullscreen', 'allow', 'data-old-link'],
+    'i': ['iclass'],
+    'a': ['hidden', 'href', 'target', 'rel', 'media', 'hreflang', 'type', 'charset', 'name', 'rev', 'shape', 'coords', 'download', 'alt'],
+    '#p': [],
+    'li': ['value'],
+    '-ol': ['reversed', 'start', 'type', 'compact'],
+    'pre': ['width'],
+    'table': ['border', 'summary', 'width', 'frame', 'rules', 'cellspacing', 'cellpadding', 'bgcolor'],
+    'tbody': ['char', 'charoff', 'valign'],
+    'td': ['colspan', 'rowspan', 'headers', 'abbr', 'axis', 'scope', 'align', 'char', 'charoff', 'valign', 'nowrap', 'bgcolor', 'width', 'height'],
+    'tfoot': ['char', 'charoff', 'valign'],
+    'th': ['colspan', 'rowspan', 'headers', 'scope', 'abbr', 'axis', 'align', 'char', 'charoff', 'valign', 'nowrap', 'bgcolor', 'width', 'height'],
+    'thead': ['char', 'charoff', 'valign'],
+    'tr': ['char', 'charoff', 'valign', 'bgcolor'],
+    '-ul': ['compact'],
+    'video': ['name', 'src', 'allowfullscreen', 'muted', 'poster', 'width', 'height', 'controls', 'playsinline'],
+    'audio': ['name', 'src', 'muted', 'controls'],
+    'annotation': ['href', 'xref', 'definitionURL', 'encoding', 'cd', 'name', 'src'],
+    'annotation-xml': ['href', 'xref', 'definitionURL', 'encoding', 'cd', 'name', 'src'],
+    'maction': ['href', 'xref', 'mathcolor', 'mathbackground', 'actiontype', 'selection'],
+    'maligngroup': ['href', 'xref', 'mathcolor', 'mathbackground', 'groupalign'],
+    'malignmark': ['href', 'xref', 'mathcolor', 'mathbackground', 'edge'],
+    'math': ['xmlns', 'href', 'xref', 'display', 'maxwidth', 'overflow', 'altimg', 'altimg-width', 'altimg-height', 'altimg-valign', 'alttext', 'cdgroup', 'mathcolor', 'mathbackground', 'scriptlevel', 'displaystyle', 'scriptsizemultiplier', 'scriptminsize', 'infixlinebreakstyle', 'decimalpoint', 'mathvariant', 'mathsize', 'width', 'height', 'valign', 'form', 'fence', 'separator', 'lspace', 'rspace', 'stretchy', 'symmetric', 'maxsize', 'minsize', 'largeop', 'movablelimits', 'accent', 'linebreak', 'lineleading', 'linebreakstyle', 'linebreakmultchar', 'indentalign', 'indentshift', 'indenttarget', 'indentalignfirst', 'indentshiftfirst', 'indentalignlast', 'indentshiftlast', 'depth', 'lquote', 'rquote', 'linethickness', 'munalign', 'denomalign', 'bevelled', 'voffset', 'open', 'close', 'separators', 'notation', 'subscriptshift', 'superscriptshift', 'accentunder', 'align', 'rowalign', 'columnalign', 'groupalign', 'alignmentscope', 'columnwidth', 'rowspacing', 'columnspacing', 'rowlines', 'columnlines', 'frame', 'framespacing', 'equalrows', 'equalcolumns', 'side', 'minlabelspacing', 'rowspan', 'columnspan', 'edge', 'stackalign', 'charalign', 'charspacing', 'longdivstyle', 'position', 'shift', 'location', 'crossout', 'length', 'leftoverhang', 'rightoverhang', 'mslinethickness', 'selection'],
+    'menclose': ['href', 'xref', 'mathcolor', 'mathbackground', 'notation'],
+    'merror': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'mfenced': ['href', 'xref', 'mathcolor', 'mathbackground', 'open', 'close', 'separators'],
+    'mfrac': ['href', 'xref', 'mathcolor', 'mathbackground', 'linethickness', 'munalign', 'denomalign', 'bevelled'],
+    'mglyph': ['href', 'xref', 'mathcolor', 'mathbackground', 'src', 'alt', 'width', 'height', 'valign'],
+    'mi': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize'],
+    'mlabeledtr': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'mlongdiv': ['href', 'xref', 'mathcolor', 'mathbackground', 'longdivstyle', 'align', 'stackalign', 'charalign', 'charspacing'],
+    'mmultiscripts': ['href', 'xref', 'mathcolor', 'mathbackground', 'subscriptshift', 'superscriptshift'],
+    'mn': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize'],
+    'mo': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize', 'form', 'fence', 'separator', 'lspace', 'rspace', 'stretchy', 'symmetric', 'maxsize', 'minsize', 'largeop', 'movablelimits', 'accent', 'linebreak', 'lineleading', 'linebreakstyle', 'linebreakmultchar', 'indentalign', 'indentshift', 'indenttarget', 'indentalignfirst', 'indentshiftfirst', 'indentalignlast', 'indentshiftlast'],
+    'mover': ['href', 'xref', 'mathcolor', 'mathbackground', 'accent', 'align'],
+    'mpadded': ['href', 'xref', 'mathcolor', 'mathbackground', 'height', 'depth', 'width', 'lspace', 'voffset'],
+    'mphantom': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'mprescripts': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'mroot': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'mrow': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'ms': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize', 'lquote', 'rquote'],
+    'mscarries': ['href', 'xref', 'mathcolor', 'mathbackground', 'position', 'location', 'crossout', 'scriptsizemultiplier'],
+    'mscarry': ['href', 'xref', 'mathcolor', 'mathbackground', 'location', 'crossout'],
+    'msgroup': ['href', 'xref', 'mathcolor', 'mathbackground', 'position', 'shift'],
+    'msline': ['href', 'xref', 'mathcolor', 'mathbackground', 'position', 'length', 'leftoverhang', 'rightoverhang', 'mslinethickness'],
+    'mspace': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize'],
+    'msqrt': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'msrow': ['href', 'xref', 'mathcolor', 'mathbackground', 'position'],
+    'mstack': ['href', 'xref', 'mathcolor', 'mathbackground', 'align', 'stackalign', 'charalign', 'charspacing'],
+    'mstyle': ['href', 'xref', 'mathcolor', 'mathbackground', 'scriptlevel', 'displaystyle', 'scriptsizemultiplier', 'scriptminsize', 'infixlinebreakstyle', 'decimalpoint', 'mathvariant', 'mathsize', 'width', 'height', 'valign', 'form', 'fence', 'separator', 'lspace', 'rspace', 'stretchy', 'symmetric', 'maxsize', 'minsize', 'largeop', 'movablelimits', 'accent', 'linebreak', 'lineleading', 'linebreakstyle', 'linebreakmultchar', 'indentalign', 'indentshift', 'indenttarget', 'indentalignfirst', 'indentshiftfirst', 'indentalignlast', 'indentshiftlast', 'depth', 'lquote', 'rquote', 'linethickness', 'munalign', 'denomalign', 'bevelled', 'voffset', 'open', 'close', 'separators', 'notation', 'subscriptshift', 'superscriptshift', 'accentunder', 'align', 'rowalign', 'columnalign', 'groupalign', 'alignmentscope', 'columnwidth', 'rowspacing', 'columnspacing', 'rowlines', 'columnlines', 'frame', 'framespacing', 'equalrows', 'equalcolumns', 'side', 'minlabelspacing', 'rowspan', 'columnspan', 'edge', 'stackalign', 'charalign', 'charspacing', 'longdivstyle', 'position', 'shift', 'location', 'crossout', 'length', 'leftoverhang', 'rightoverhang', 'mslinethickness', 'selection'],
+    'msub': ['href', 'xref', 'mathcolor', 'mathbackground', 'subscriptshift'],
+    'msubsup': ['href', 'xref', 'mathcolor', 'mathbackground', 'subscriptshift', 'superscriptshift'],
+    'msup': ['href', 'xref', 'mathcolor', 'mathbackground', 'superscriptshift'],
+    'mtable': ['href', 'xref', 'mathcolor', 'mathbackground', 'align', 'rowalign', 'columnalign', 'groupalign', 'alignmentscope', 'columnwidth', 'width', 'rowspacing', 'columnspacing', 'rowlines', 'columnlines', 'frame', 'framespacing', 'equalrows', 'equalcolumns', 'displaystyle', 'side', 'minlabelspacing'],
+    'mtd': ['href', 'xref', 'mathcolor', 'mathbackground', 'rowspan', 'columnspan', 'rowalign', 'columnalign', 'groupalign'],
+    'mtext': ['href', 'xref', 'mathcolor', 'mathbackground', 'mathvariant', 'mathsize', 'width', 'height', 'depth', 'linebreak'],
+    'mtr': ['href', 'xref', 'mathcolor', 'mathbackground', 'rowalign', 'columnalign', 'groupalign'],
+    'munder': ['href', 'xref', 'mathcolor', 'mathbackground', 'accentunder', 'align'],
+    'munderover': ['href', 'xref', 'mathcolor', 'mathbackground', 'accent', 'accentunder', 'align'],
+    'none': ['href', 'xref', 'mathcolor', 'mathbackground'],
+    'semantics': ['href', 'xref', 'definitionURL', 'encoding'],
+    'picture': [],
+    'ruby': [],
+    'rp': [],
+    'rt': [],
+    'g': ['*'],
+    'circle': ['*']
+  }),
   non_empty_elements: 'td th iframe video audio object script a i area base basefont br col frame hr img input isindex link meta param embed source wbr track ruby',
   // tiny's external link create/edit dialog config
   target_list: false,

package/es/enhance-user-content/enhance_user_content.js

@@ -242,7 +242,7 @@ export function enhanceUserContent(container = document, opts = {}) {
         iframeElem.setAttribute('src', src.replace('display=in_rce', 'display=borderless'));
       }
     });
-    unenhanced_elem.querySelectorAll('a:not(.not_external, .external)').forEach(childLink => {
+    unenhanced_elem.querySelectorAll('a:not(.not_external):not(.external)').forEach(childLink => {
       if (!isExternalLink(childLink, canvasOrigin)) return;
       if (childLink.tagName === 'IMG' || childLink.querySelectorAll('img').length > 0) return;
       childLink.classList.add('external');

package/es/enhance-user-content/instructure_helper.js

@@ -21,6 +21,7 @@ import { showFlashAlert } from '../common/FlashAlert';
 import { isPreviewable, loadDocPreview, removeLoadingImage, showLoadingImage } from './doc_previews';
 import { show } from './jqueryish_funcs';
 import { parseUrlOrNull } from '../util/url-util';
+import psl from 'psl';
 const youTubeRegEx = /^https?:\/\/(www\.youtube\.com\/watch.*v(=|\/)|youtu\.be\/)([^&#]*)/;
 export function youTubeID(path) {
   const match = path.match(youTubeRegEx);
@@ -31,9 +32,12 @@ export function youTubeID(path) {
 }
 export function getTld(hostname) {
   hostname = (hostname || '').split(':')[0];
-  const parts = hostname.split('.'),
-    length = parts.length;
-  return (length > 1 ? [parts[length - 2], parts[length - 1]] : parts).join('.');
+  if (hostname.includes('inseng.test')) {
+    const parts = hostname.split('.');
+    return parts.slice(-3).join('.');
+  }
+  const parsed = psl.parse(hostname);
+  return parsed.domain || hostname;
 }
 export function isExternalLink(element, canvasOrigin = window.location.origin) {
   let canvasHost;

package/es/rce/RCEWrapper.js

@@ -63,6 +63,7 @@ import buildStyle from './style';
 import { getMenubarForVariant, getMenuForVariant, getToolbarForVariant, getStatusBarFeaturesForVariant } from './RCEVariants';
 import { focusFirstMenuButton, focusToolbar, isElementWithinTable, mergeMenu, mergeMenuItems, mergePlugins, mergeToolbar, parsePluginsToExclude, patchAutosavedContent } from './RCEWrapper.utils';
 import { externalToolsForToolbar } from './plugins/instructure_rce_external_tools/util/externalToolsForToolbar';
+import { initScreenreaderOnFormat } from './screenreaderOnFormat';
 const RestoreAutoSaveModal = /*#__PURE__*/React.lazy(() => import('./RestoreAutoSaveModal'));
 const RceHtmlEditor = /*#__PURE__*/React.lazy(() => import('./RceHtmlEditor'));
 const ASYNC_FOCUS_TIMEOUT = 250;
@@ -311,6 +312,7 @@ class RCEWrapper extends React.Component {
       // @ts-expect-error
       textarea.value = this.getCode();
       textarea.style.height = this.state.height;
+      textarea.removeAttribute('aria-hidden');
       if (document.body.classList.contains('Underline-All-Links__enabled')) {
         if (this.iframe?.contentDocument) {
           this.iframe.contentDocument.body.classList.add('Underline-All-Links__enabled');
@@ -350,6 +352,7 @@ class RCEWrapper extends React.Component {
       // focus-trapping components, so they properly ignore trapping focus on click.
       editor.on('click', () => window.document.body.click(), true);
       editor.on('Cut Change input Undo Redo', debounce(this.handleInputChange, 1000));
+      initScreenreaderOnFormat(editor);
       this.announceContextToolbars(editor);
       if (this.isAutoSaving) {
         this.initAutoSave(editor);

package/es/rce/contentRendering.js

@@ -20,7 +20,7 @@ import React from 'react';
 import { renderToStaticMarkup } from 'react-dom/server';
 import { cleanUrl } from './contentInsertionUtils';
 import formatMessage from '../format-message';
-import { VIDEO_SIZE_DEFAULT, AUDIO_PLAYER_SIZE } from './plugins/instructure_record/VideoOptionsTray/TrayController';
+import { videoDefaultSize, AUDIO_PLAYER_SIZE } from './plugins/instructure_record/VideoOptionsTray/TrayController';
 import { mediaPlayerURLFromFile } from './plugins/shared/fileTypeUtils';
 import { prepEmbedSrc, prepLinkedSrc, absoluteToRelativeUrl } from '../common/fileUrl';
 export function renderLink(data, contents, canvasOrigin) {
@@ -97,6 +97,7 @@ export function renderImage(image, canvasOrigin, opts) {
 }
 export function renderVideo(video, canvasOrigin) {
   const src = mediaPlayerURLFromFile(video, canvasOrigin);
+  const videoSize = videoDefaultSize();
   return `
   <iframe
       allow="fullscreen"
@@ -105,7 +106,7 @@ export function renderVideo(video, canvasOrigin) {
       data-media-type="video"
       loading="lazy"
       src="${src}"
-      style="width:${VIDEO_SIZE_DEFAULT.width};height:${VIDEO_SIZE_DEFAULT.height};display:inline-block;"
+      style="width:${videoSize.width};height:${videoSize.height};display:inline-block;"
       title="${formatMessage('Video player for {title}', {
     title: video.title || video.name || video.text
   })}"></iframe>

package/es/rce/plugins/instructure_image/ImageOptionsTray/index.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2019 - present Instructure, Inc.
+ * Copyright (C) 2025 - present Instructure, Inc.
  *
  * This file is part of Canvas.
  *
@@ -16,7 +16,7 @@
  * with this program. If not, see <http://www.gnu.org/licenses/>.
  */
 
-import React, { useState, useEffect } from 'react';
+import React, { useState, useEffect, useRef } from 'react';
 import { bool, func, number, shape, string } from 'prop-types';
 import { Button, CloseButton } from '@instructure/ui-buttons';
 import { Heading } from '@instructure/ui-heading';
@@ -60,6 +60,17 @@ export default function ImageOptionsTray(props) {
     minWidth: MIN_WIDTH,
     minPercentage: MIN_PERCENTAGE
   });
+  const [altHasError, setAltHasError] = useState(false);
+  const [urlHasError, setUrlHasError] = useState(false);
+  const [dimensionsHasError, setDimensionsHasError] = useState(false);
+  const urlRef = useRef(null);
+  const altRef = useRef(null);
+  const dimensionsRef = useRef(null);
+  useEffect(() => {
+    setUrlHasError(showUrlField && url === '');
+    setAltHasError(displayAs === 'embed' && !isDecorativeImage && altText === '');
+    setDimensionsHasError(imageSize === CUSTOM && !dimensionsState?.isValid);
+  }, [isDecorativeImage, altText, url, displayAs, showUrlField, imageSize, dimensionsState?.isValid]);
   function handleUrlChange(newUrl) {
     setUrl(newUrl);
   }
@@ -72,7 +83,7 @@ export default function ImageOptionsTray(props) {
   function handleDisplayAsChange(event) {
     setDisplayAs(event.target.value);
   }
-  function handleImageSizeChange(event, selectedOption) {
+  function handleImageSizeChange(_e, selectedOption) {
     setImageSize(selectedOption.value);
     if (selectedOption.value === CUSTOM) {
       setImageHeight(currentHeight);
@@ -88,6 +99,18 @@ export default function ImageOptionsTray(props) {
   }
   function handleSave(event) {
     event.preventDefault();
+    if (urlHasError || altHasError || dimensionsHasError) {
+      if (altHasError) {
+        altRef?.current?.focus();
+      }
+      if (urlHasError) {
+        urlRef?.current?.focus();
+      }
+      if (dimensionsHasError) {
+        dimensionsRef?.current?.focus();
+      }
+      return;
+    }
     const savedAltText = isDecorativeImage ? '' : altText;
     let appliedHeight = imageHeight;
     let appliedWidth = imageWidth;
@@ -134,9 +157,6 @@ export default function ImageOptionsTray(props) {
       type: 'hint'
     });
   }
-  const disableForIcons = isIconMaker && !isDecorativeImage && altText === '';
-  const disableForImages = url === '' || displayAs === 'embed' && (!isDecorativeImage && altText === '' || imageSize === CUSTOM && !dimensionsState?.isValid);
-  const saveDisabled = isIconMaker ? disableForIcons : disableForImages;
   const trayLabel = isIconMaker ? formatMessage('Icon Options Tray') : formatMessage('Image Options Tray');
   const trayHeading = isIconMaker ? formatMessage('Icon Options') : formatMessage('Image Options');
   return /*#__PURE__*/React.createElement(Tray, {
@@ -183,7 +203,9 @@ export default function ImageOptionsTray(props) {
     padding: "small"
   }, /*#__PURE__*/React.createElement(UrlPanel, {
     fileUrl: url,
-    setFileUrl: handleUrlChange
+    urlRef: urlRef,
+    setFileUrl: handleUrlChange,
+    urlHasError: urlHasError
   })), /*#__PURE__*/React.createElement(ImageOptionsForm, {
     id: "image-options-form",
     imageSize: imageSize,
@@ -197,14 +219,16 @@ export default function ImageOptionsTray(props) {
     handleDisplayAsChange: handleDisplayAsChange,
     handleImageSizeChange: handleImageSizeChange,
     messagesForSize: messagesForSize,
-    isIconMaker: isIconMaker
+    isIconMaker: isIconMaker,
+    altHasError: altHasError,
+    altRef: altRef,
+    dimensionsRef: dimensionsRef
   })), /*#__PURE__*/React.createElement(Flex.Item, {
     background: "secondary",
     borderWidth: "small none none none",
     padding: "small medium",
     textAlign: "end"
   }, /*#__PURE__*/React.createElement(Button, {
-    disabled: saveDisabled,
     onClick: handleSave,
     color: "primary"
   }, formatMessage('Done')))))));

package/es/rce/plugins/instructure_rce_external_tools/RceToolWrapper.d.ts

@@ -33,7 +33,7 @@ export declare class RceToolWrapper {
         width: import("prop-types").Requireable<number>;
         use_tray: import("prop-types").Requireable<boolean>;
         canvas_icon_class: import("prop-types").Requireable<any>;
-    }, "description" | "id" | "name" | "height" | "width" | "favorite" | "on_by_default" | "icon_url" | "use_tray" | "canvas_icon_class">>>)[], mruIds?: string[]): RceToolWrapper[];
+    }, "id" | "name" | "width" | "height" | "description" | "favorite" | "on_by_default" | "icon_url" | "use_tray" | "canvas_icon_class">>>)[], mruIds?: string[]): RceToolWrapper[];
     readonly iconId: string | null | undefined;
     isMruTool: boolean;
     get editor(): import("../../types").ExternalToolsEditor | null;

package/es/rce/plugins/instructure_record/VideoOptionsTray/TrayController.d.ts

@@ -3,12 +3,22 @@ export namespace VIDEO_SIZE_DEFAULT {
     let height: string;
     let width: string;
 }
-export namespace AUDIO_PLAYER_SIZE {
-    let width_1: string;
-    export { width_1 as width };
+export namespace STUDIO_PLAYER_VIDEO_SIZE_DEFAULT {
     let height_1: string;
     export { height_1 as height };
+    let width_1: string;
+    export { width_1 as width };
+}
+export namespace AUDIO_PLAYER_SIZE {
+    let width_2: string;
+    export { width_2 as width };
+    let height_2: string;
+    export { height_2 as height };
 }
+export function videoDefaultSize(): {
+    height: string;
+    width: string;
+};
 export default class TrayController {
     _editor: any;
     _isOpen: boolean;

package/es/rce/plugins/instructure_record/VideoOptionsTray/TrayController.js

@@ -28,10 +28,20 @@ export const VIDEO_SIZE_DEFAULT = {
   height: '225px',
   width: '400px'
 }; // AKA "LARGE"
+export const STUDIO_PLAYER_VIDEO_SIZE_DEFAULT = {
+  height: '300px',
+  width: '480px'
+};
 export const AUDIO_PLAYER_SIZE = {
   width: '320px',
   height: '14.25rem'
 };
+export const videoDefaultSize = () => {
+  if (RCEGlobals.getFeatures().consolidated_media_player) {
+    return STUDIO_PLAYER_VIDEO_SIZE_DEFAULT;
+  }
+  return VIDEO_SIZE_DEFAULT;
+};
 export default class TrayController {
   constructor() {
     this._editor = null;

package/es/rce/plugins/instructure_record/mediaTranslations.d.ts

@@ -25,6 +25,9 @@ declare namespace uploadMediaTranslations {
         let ADDED_CAPTION: string;
         let DELETED_CAPTION: string;
         let PROGRESS_LABEL: string;
+        let SELECT_SUPPORTED_FILE_TYPE: string;
+        let CHOOSE_FILE_TO_UPLOAD: string;
+        let ENTER_FILE_NAME: string;
     }
     namespace SelectStrings {
         let USE_ARROWS: string;

package/es/rce/plugins/instructure_record/mediaTranslations.js

@@ -46,7 +46,10 @@ const uploadMediaTranslations = {
     ADD_NEW_CAPTION_OR_SUBTITLE: formatMessage('Add another'),
     ADDED_CAPTION: 'Captions for {lang} added',
     DELETED_CAPTION: 'Deleted captions for {lang}',
-    PROGRESS_LABEL: formatMessage('Uploading')
+    PROGRESS_LABEL: formatMessage('Uploading'),
+    SELECT_SUPPORTED_FILE_TYPE: formatMessage('Please select a file of a supported type'),
+    CHOOSE_FILE_TO_UPLOAD: formatMessage('Please choose a file'),
+    ENTER_FILE_NAME: formatMessage('Please enter a file name')
   },
   SelectStrings: {
     USE_ARROWS: 'Use arrow keys to navigate options.',

package/es/rce/plugins/shared/DimensionsInput/DimensionInput.d.ts

@@ -1,13 +1,15 @@
 declare function DimensionInput(props: any): React.JSX.Element;
 declare namespace DimensionInput {
     namespace propTypes {
-        let dimensionState: import("prop-types").Requireable<import("prop-types").InferProps<{
+        export let dimensionState: import("prop-types").Requireable<import("prop-types").InferProps<{
             addOffset: import("prop-types").Validator<(...args: any[]) => any>;
             inputValue: import("prop-types").Validator<string>;
             setInputValue: import("prop-types").Validator<(...args: any[]) => any>;
         }>>;
-        let label: import("prop-types").Validator<string>;
+        export { object as dimensionsRef };
+        export let label: import("prop-types").Validator<string>;
     }
 }
 export default DimensionInput;
 import React from 'react';
+import { object } from 'prop-types';

package/es/rce/plugins/shared/DimensionsInput/DimensionInput.js

@@ -17,14 +17,15 @@
  */
 
 import React from 'react';
-import { func, shape, string } from 'prop-types';
+import { func, shape, string, object } from 'prop-types';
 import { ScreenReaderContent } from '@instructure/ui-a11y-content';
 import { NumberInput } from '@instructure/ui-number-input';
 export default function DimensionInput(props) {
   const {
     dimensionState,
     label,
-    messages
+    messages,
+    dimensionsRef
   } = props;
   const {
     addOffset,
@@ -49,7 +50,12 @@ export default function DimensionInput(props) {
     isRequired: true,
     showArrows: false,
     value: inputValue,
-    messages: messages
+    messages: messages,
+    inputRef: ref => {
+      if (dimensionsRef) {
+        dimensionsRef.current = ref;
+      }
+    }
   });
 }
 DimensionInput.propTypes = {
@@ -58,5 +64,6 @@ DimensionInput.propTypes = {
     inputValue: string.isRequired,
     setInputValue: func.isRequired
   }),
+  dimensionsRef: object,
   label: string.isRequired
 };

package/es/rce/plugins/shared/DimensionsInput/index.d.ts

@@ -25,6 +25,7 @@ declare namespace DimensionsInput {
         export let minWidth: import("prop-types").Validator<number>;
         export let minPercentage: import("prop-types").Validator<number>;
         export { bool as hidePercentage };
+        export { object as dimensionsRef };
     }
     namespace defaultProps {
         let hidePercentage: boolean;
@@ -34,3 +35,4 @@ export default DimensionsInput;
 export { default as useDimensionsState } from "./useDimensionsState";
 import React from 'react';
 import { bool } from 'prop-types';
+import { object } from 'prop-types';