@richscripts/richtexteditor 2.7.2 → 2.9.0

package/richtexteditor/plugins/autoembed.js

@@ -163,6 +163,13 @@ function RTE_Plugin_AutoEmbed() {
         st.id = "rte-autoembed-styles";
         st.appendChild(doc.createTextNode(css));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-autoembed-styles", st.textContent);
+        }
     }
 
     // Programmatic insert at caret (public editor.embedUrl API).

package/richtexteditor/plugins/blocktypes.js

@@ -169,6 +169,13 @@ function RTE_Plugin_BlockTypes() {
                 st.setAttribute("data-rte-blocktypes", "1");
                 st.textContent = css;
                 head.appendChild(st);
+                // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+                // drops its rules, leaving this plugin's UI unstyled. The element above stays
+                // the path everyone else takes; this re-injects through the CSSOM only when
+                // the policy actually emptied it.
+                if (editor && typeof editor.ensureStyleSheetLive === "function") {
+                    editor.ensureStyleSheetLive(editdoc, st, "rte-blocktypes-st", st.textContent);
+                }
             }
         } catch (e) { /* ignore */ }
     }

package/richtexteditor/plugins/bookmarkcard.js

@@ -231,6 +231,13 @@ function RTE_Plugin_BookmarkCard() {
                 st.setAttribute("data-rte-bookmarkcard", "1");
                 st.textContent = css;
                 head.appendChild(st);
+                // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+                // drops its rules, leaving this plugin's UI unstyled. The element above stays
+                // the path everyone else takes; this re-injects through the CSSOM only when
+                // the policy actually emptied it.
+                if (editor && typeof editor.ensureStyleSheetLive === "function") {
+                    editor.ensureStyleSheetLive(editdoc, st, "rte-bookmarkcard-st", st.textContent);
+                }
             }
         } catch (e) { /* ignore */ }
     }

package/richtexteditor/plugins/charlimit.js

@@ -167,6 +167,13 @@ function RTE_Plugin_CharLimit() {
         st.textContent = ".rte-charlimit-counter{position:absolute;right:10px;bottom:6px;z-index:5;font:11px -apple-system,Segoe UI,sans-serif;color:#64748b;background:rgba(255,255,255,.85);padding:1px 7px;border-radius:9px;pointer-events:none}" +
             ".rte-charlimit-counter.is-near{color:#b45309}.rte-charlimit-counter.is-over{color:#dc2626;font-weight:600}";
         (doc.head || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-charlimit-st", st.textContent);
+        }
     }
 
     function refresh() {

package/richtexteditor/plugins/comments.js

@@ -627,6 +627,13 @@ function RTE_Plugin_Comments() {
                 ".rte-comment-dark .rte-comment-quote{background:rgba(245,158,11,.12);color:#fcd34d}"
             ].join("\n");
             host.head.appendChild(style);
+            // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+            // drops its rules, leaving this plugin's UI unstyled. The element above stays
+            // the path everyone else takes; this re-injects through the CSSOM only when
+            // the policy actually emptied it.
+            if (editor && typeof editor.ensureStyleSheetLive === "function") {
+                editor.ensureStyleSheetLive(host, style, "rte-comments-style", style.textContent);
+            }
         }
 
         var editdoc = editor.getDocument();
@@ -640,6 +647,13 @@ function RTE_Plugin_Comments() {
                 "@keyframes rte-comment-flash{0%{background:rgba(251,191,36,.9)}100%{background:" + config.commentHighlightBg + "}}"
             ].join("\n");
             editdoc.head.appendChild(iStyle);
+            // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+            // drops its rules, leaving this plugin's UI unstyled. The element above stays
+            // the path everyone else takes; this re-injects through the CSSOM only when
+            // the policy actually emptied it.
+            if (editor && typeof editor.ensureStyleSheetLive === "function") {
+                editor.ensureStyleSheetLive(editdoc, iStyle, "rte-comments-iStyle", iStyle.textContent);
+            }
         }
     }
 

package/richtexteditor/plugins/contentminimap.js

@@ -104,6 +104,13 @@ function RTE_Plugin_ContentMinimap() {
             "@media (max-width: 1100px){.rte-content-minimap-shell{display:block;}.rte-content-minimap-panel{margin-top:12px;max-width:none;width:100%;}.rte-content-minimap-body{max-height:280px;}}"
         ].join("");
         hostDoc.head.appendChild(style);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(hostDoc, style, "rte-content-minimap-style", style.textContent);
+        }
     }
 
     function ensureShell() {

package/richtexteditor/plugins/crossreference.js

@@ -404,5 +404,12 @@ function RTE_Plugin_CrossReference() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-xref-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/dictation.js

@@ -231,6 +231,13 @@ function RTE_Plugin_Dictation() {
         style.setAttribute("data-rte-dictation", "1");
         style.appendChild(document.createTextNode(css));
         document.head.appendChild(style);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(document, style, "rte-dictation-style", style.textContent);
+        }
     }
 
     function normalize(text, isFinal) {

package/richtexteditor/plugins/documentoutline.js

@@ -75,9 +75,7 @@ function RTE_Plugin_DocumentOutline() {
     function injectStyles() {
         var hostDoc = config.container.ownerDocument;
         if (hostDoc.getElementById("rte-document-outline-style")) return;
-        var style = hostDoc.createElement("style");
-        style.id = "rte-document-outline-style";
-        style.innerHTML = [
+        var csstext = [
             ".rte-document-outline-shell{display:flex;align-items:stretch;gap:10px;}",
             ".rte-document-outline-shell>.rte-document-outline-host{flex:1 1 auto;min-width:0;}",
             "/* 2026-07-12 navigation panel precision */",
@@ -100,7 +98,15 @@ function RTE_Plugin_DocumentOutline() {
             ".rte-document-outline-empty{margin:6px;padding:14px;color:#52657e;font-size:13px;font-weight:700;line-height:1.55;background:#fff;border:1px dashed rgba(148,163,184,.34);border-radius:8px;}",
             "@media (max-width: 1100px){.rte-document-outline-shell{display:block;}.rte-document-outline-panel{margin-top:12px;max-width:none;width:100%;}.rte-document-outline-body{max-height:320px;}}"
         ].join("");
+        var style = hostDoc.createElement("style");
+        style.id = "rte-document-outline-style";
+        style.appendChild(hostDoc.createTextNode(csstext));
         hostDoc.head.appendChild(style);
+        // A <style> element's rules are dropped under a strict style-src; this
+        // re-injects them through the CSSOM in that case only.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(hostDoc, style, "rte-document-outline-style", csstext);
+        }
     }
 
     function ensureShell() {

package/richtexteditor/plugins/draghandle.js

@@ -305,5 +305,12 @@ function RTE_Plugin_DragHandle() {
             ".rte-drag-active *{cursor:grabbing !important;}"
         ));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-drag-handle-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/foldheadings.js

@@ -146,6 +146,13 @@ function RTE_Plugin_FoldHeadings() {
         st.id = "rte-foldheadings-styles";
         st.appendChild(doc.createTextNode(css));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-foldheadings-styles", st.textContent);
+        }
     }
 
     // Strip fold classes for the duration of a serialization call so saved markup

package/richtexteditor/plugins/footnotes.js

@@ -394,5 +394,12 @@ function RTE_Plugin_Footnotes() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is refused under `style-src 'self'` and its rules are
+        // dropped, so footnote markers and the separator rendered unstyled for any
+        // customer on a strict CSP. This re-injects through the CSSOM only in that
+        // case; the element above stays the path everyone else takes.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-footnotes-styles", text);
+        }
     }
 }

package/richtexteditor/plugins/formatpainter.js

@@ -294,5 +294,12 @@ function RTE_Plugin_FormatPainter() {
         st.id = "rte-format-painter-styles";
         st.appendChild(doc.createTextNode(css()));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-format-painter-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/formattingmarks.js

@@ -242,5 +242,12 @@ function RTE_Plugin_FormattingMarks() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-formatting-marks-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/gapcursor.js

@@ -361,5 +361,12 @@ function RTE_Plugin_GapCursor() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-gapcursor-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/ghostcomplete.js

@@ -264,6 +264,13 @@ function RTE_Plugin_GhostComplete() {
         st.id = "rte-ghost-styles";
         st.appendChild(doc.createTextNode(css));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-ghost-styles", st.textContent);
+        }
     }
 
     function stripFor() {

package/richtexteditor/plugins/layouttable.js

@@ -374,6 +374,13 @@ function RTE_Plugin_LayoutTable() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-layout-table-styles", st.textContent);
+        }
     }
 
     function fireChange() {

package/richtexteditor/plugins/linenumbers.js

@@ -348,5 +348,12 @@ function RTE_Plugin_LineNumbers() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-linenumber-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/linkchecker.js

@@ -392,5 +392,12 @@ function RTE_Plugin_LinkChecker() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-link-checker-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/mentionplugin.js

@@ -519,6 +519,13 @@ function RTE_Plugin_Mention() {
             ".rte-mention:hover{background:#e4edff}"
         ].join("\n");
         host.head.appendChild(style);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(host, style, "rte-mentionplugin-style", style.textContent);
+        }
 
         // Also inject mention-span styles inside the iframe so the pill looks right while editing.
         var editdoc = editor.getDocument();
@@ -530,6 +537,13 @@ function RTE_Plugin_Mention() {
                 ".rte-mention:hover{background:#e4edff}"
             ].join("\n");
             editdoc.head.appendChild(iStyle);
+            // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+            // drops its rules, leaving this plugin's UI unstyled. The element above stays
+            // the path everyone else takes; this re-injects through the CSSOM only when
+            // the policy actually emptied it.
+            if (editor && typeof editor.ensureStyleSheetLive === "function") {
+                editor.ensureStyleSheetLive(editdoc, iStyle, "rte-mentionplugin-iStyle", iStyle.textContent);
+            }
         }
     }
 }

package/richtexteditor/plugins/mergefields.js

@@ -324,5 +324,12 @@ function RTE_Plugin_MergeFields() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-merge-field-styles", st.textContent);
+        }
     }
 }

package/richtexteditor/plugins/mermaiddiagram.js

@@ -128,6 +128,13 @@ function RTE_Plugin_MermaidDiagram() {
         style.id = "rte-mermaid-styles";
         style.appendChild(doc.createTextNode(css));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(style);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, style, "rte-mermaid-styles", style.textContent);
+        }
     }
 
     function getMermaid(win) {

package/richtexteditor/plugins/multilevellist.js

@@ -133,5 +133,12 @@ function RTE_Plugin_MultiLevelList() {
         st.setAttribute("data-css", text);
         st.appendChild(doc.createTextNode(text));
         (doc.head || doc.getElementsByTagName("head")[0] || doc.documentElement).appendChild(st);
+        // A <style> ELEMENT is governed by style-src: under a strict policy the browser
+        // drops its rules, leaving this plugin's UI unstyled. The element above stays
+        // the path everyone else takes; this re-injects through the CSSOM only when
+        // the policy actually emptied it.
+        if (editor && typeof editor.ensureStyleSheetLive === "function") {
+            editor.ensureStyleSheetLive(doc, st, "rte-legal-list-styles", st.textContent);
+        }
     }
 }