jodit-pro 4.10.4 → 4.11.1

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.10.4
+ * Version: v4.11.1
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */
@@ -2233,7 +2233,7 @@ function _unsupported_iterable_to_array(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
 }
-var APP_VERSION = "4.10.4";
+var APP_VERSION = "4.11.1";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -7547,21 +7547,77 @@ function normalizeCSS(s) {
 /**
  * Removes dangerous constructs from HTML
  */ function safeHTML(box, options) {
+    var _a;
     if (!_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(box) && !_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isFragment(box)) {
         return;
     }
-    if (options.removeOnError) {
-        sanitizeHTMLElement(box);
+    var removeEvents = (_a = options.removeEventAttributes) !== null && _a !== void 0 ? _a : options.removeOnError;
+    if (removeEvents) {
+        removeAllEventAttributes(box);
+        (0,_utils_index_js__WEBPACK_IMPORTED_MODULE_1__.$$)('*', box).forEach(function(elm) {
+            return removeAllEventAttributes(elm);
+        });
+    } else if (options.removeOnError) {
+        sanitizeHTMLElement(box, options);
         (0,_utils_index_js__WEBPACK_IMPORTED_MODULE_1__.$$)('[onerror]', box).forEach(function(elm) {
             return sanitizeHTMLElement(elm, options);
         });
     }
     if (options.safeJavaScriptLink) {
-        sanitizeHTMLElement(box);
+        sanitizeHTMLElement(box, options);
         (0,_utils_index_js__WEBPACK_IMPORTED_MODULE_1__.$$)('a[href^="javascript"]', box).forEach(function(elm) {
             return sanitizeHTMLElement(elm, options);
         });
     }
+    if (options.safeLinksTarget) {
+        (0,_utils_index_js__WEBPACK_IMPORTED_MODULE_1__.$$)('a[target="_blank"]', box).forEach(function(elm) {
+            var rel = elm.getAttribute('rel') || '';
+            var parts = rel.split(/\s+/).filter(Boolean);
+            if (!parts.includes('noopener')) {
+                parts.push('noopener');
+            }
+            if (!parts.includes('noreferrer')) {
+                parts.push('noreferrer');
+            }
+            (0,_utils_index_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        });
+    }
+}
+/**
+ * Remove all on* event handler attributes from an element
+ */ function removeAllEventAttributes(elm) {
+    if (!_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(elm)) {
+        return false;
+    }
+    var effected = false;
+    var toRemove = [];
+    for(var i = 0; i < elm.attributes.length; i++){
+        if (elm.attributes[i].name.toLowerCase().startsWith('on')) {
+            toRemove.push(elm.attributes[i].name);
+        }
+    }
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = toRemove[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var name = _step.value;
+            elm.removeAttribute(name);
+            effected = true;
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return effected;
 }
 function sanitizeHTMLElement(elm) {
     var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {
@@ -44657,6 +44713,10 @@ function _is_native_reflect_construct() {
         {
             key: "onSafeHTML",
             value: function onSafeHTML(sandBox) {
+                var sanitizer = this.j.o.cleanHTML.sanitizer;
+                if (sanitizer) {
+                    sandBox.innerHTML = sanitizer(sandBox.innerHTML);
+                }
                 (0,_core_helpers_html_safe_html_js__WEBPACK_IMPORTED_MODULE_4__.safeHTML)(sandBox, this.j.o.cleanHTML);
             }
         },
@@ -44718,10 +44778,19 @@ _config_js__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.cleanHTML = {
         b: 'strong'
     },
     allowTags: false,
-    denyTags: 'script',
+    denyTags: 'script,iframe,object,embed',
     useIframeSandbox: false,
     removeOnError: true,
+    removeEventAttributes: true,
     safeJavaScriptLink: true,
+    safeLinksTarget: true,
+    allowedStyles: false,
+    sanitizer: false,
+    sandboxIframesInContent: true,
+    convertUnsafeEmbeds: [
+        'object',
+        'embed'
+    ],
     disableCleanFilter: null
 };
 _config_js__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.controls.eraser = {
@@ -44980,6 +45049,53 @@ _core_ui_icon_js__WEBPACK_IMPORTED_MODULE_0__.Icon.set('eraser', _eraser_svg_js_
 }
 
 
+/***/ }),
+
+/***/ 1962:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   convertUnsafeEmbeds: function() { return /* binding */ convertUnsafeEmbeds; }
+/* harmony export */ });
+/* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ 
+
+/**
+ * Convert `<object>` and `<embed>` elements to safer `<iframe>` elements.
+ * @private
+ */ function convertUnsafeEmbeds(jodit, nodeElm, hadEffect) {
+    var opt = jodit.o.cleanHTML.convertUnsafeEmbeds;
+    if (!opt || !_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var tag = nodeElm.nodeName.toLowerCase();
+    if (!opt.includes(tag)) {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    var src = (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'data') || (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'src') || (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'movie') || '';
+    if (!src) {
+        _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(elm);
+        return true;
+    }
+    var iframe = jodit.createInside.element('iframe');
+    (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(iframe, {
+        src: src,
+        sandbox: '',
+        frameborder: '0',
+        width: (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'width'),
+        height: (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'height')
+    });
+    _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.replace(elm, iframe, undefined, false, true);
+    return true;
+}
+
+
 /***/ }),
 
 /***/ 39433:
@@ -45023,20 +45139,28 @@ var TABLE_CONTAINER_TAGS = new Set([
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   allowAttributes: function() { return /* reexport safe */ _allow_attributes_js__WEBPACK_IMPORTED_MODULE_0__.allowAttributes; },
-/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph_js__WEBPACK_IMPORTED_MODULE_1__.fillEmptyParagraph; },
-/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node_js__WEBPACK_IMPORTED_MODULE_2__.removeEmptyTextNode; },
-/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes_js__WEBPACK_IMPORTED_MODULE_3__.removeInvTextNodes; },
-/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags_js__WEBPACK_IMPORTED_MODULE_4__.replaceOldTags; },
-/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes_js__WEBPACK_IMPORTED_MODULE_5__.sanitizeAttributes; },
-/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node_js__WEBPACK_IMPORTED_MODULE_6__.tryRemoveNode; }
+/* harmony export */   convertUnsafeEmbeds: function() { return /* reexport safe */ _convert_unsafe_embeds_js__WEBPACK_IMPORTED_MODULE_1__.convertUnsafeEmbeds; },
+/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph_js__WEBPACK_IMPORTED_MODULE_2__.fillEmptyParagraph; },
+/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node_js__WEBPACK_IMPORTED_MODULE_3__.removeEmptyTextNode; },
+/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes_js__WEBPACK_IMPORTED_MODULE_4__.removeInvTextNodes; },
+/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags_js__WEBPACK_IMPORTED_MODULE_5__.replaceOldTags; },
+/* harmony export */   safeLinksTarget: function() { return /* reexport safe */ _safe_links_target_js__WEBPACK_IMPORTED_MODULE_6__.safeLinksTarget; },
+/* harmony export */   sandboxIframesInContent: function() { return /* reexport safe */ _sandbox_iframes_in_content_js__WEBPACK_IMPORTED_MODULE_7__.sandboxIframesInContent; },
+/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes_js__WEBPACK_IMPORTED_MODULE_8__.sanitizeAttributes; },
+/* harmony export */   sanitizeStyles: function() { return /* reexport safe */ _sanitize_styles_js__WEBPACK_IMPORTED_MODULE_9__.sanitizeStyles; },
+/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node_js__WEBPACK_IMPORTED_MODULE_10__.tryRemoveNode; }
 /* harmony export */ });
 /* harmony import */ var _allow_attributes_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(82558);
-/* harmony import */ var _fill_empty_paragraph_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(39433);
-/* harmony import */ var _remove_empty_text_node_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(53392);
-/* harmony import */ var _remove_inv_text_nodes_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(25813);
-/* harmony import */ var _replace_old_tags_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(80973);
-/* harmony import */ var _sanitize_attributes_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(384);
-/* harmony import */ var _try_remove_node_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(28800);
+/* harmony import */ var _convert_unsafe_embeds_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1962);
+/* harmony import */ var _fill_empty_paragraph_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39433);
+/* harmony import */ var _remove_empty_text_node_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53392);
+/* harmony import */ var _remove_inv_text_nodes_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(25813);
+/* harmony import */ var _replace_old_tags_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(80973);
+/* harmony import */ var _safe_links_target_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(95614);
+/* harmony import */ var _sandbox_iframes_in_content_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(85978);
+/* harmony import */ var _sanitize_attributes_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(384);
+/* harmony import */ var _sanitize_styles_js__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(15583);
+/* harmony import */ var _try_remove_node_js__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(28800);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -45054,6 +45178,10 @@ __webpack_require__.r(__webpack_exports__);
 
 
 
+
+
+
+
 /***/ }),
 
 /***/ 53392:
@@ -45161,6 +45289,84 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 95614:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   safeLinksTarget: function() { return /* binding */ safeLinksTarget; }
+/* harmony export */ });
+/* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ 
+
+/**
+ * Automatically add `rel="noopener noreferrer"` to links with `target="_blank"`
+ * @private
+ */ function safeLinksTarget(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.safeLinksTarget || !_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'A') {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    if ((0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'target') !== '_blank') {
+        return hadEffect;
+    }
+    var rel = (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel') || '';
+    var parts = rel.split(/\s+/).filter(Boolean);
+    var changed = false;
+    if (!parts.includes('noopener')) {
+        parts.push('noopener');
+        changed = true;
+    }
+    if (!parts.includes('noreferrer')) {
+        parts.push('noreferrer');
+        changed = true;
+    }
+    if (changed) {
+        (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        return true;
+    }
+    return hadEffect;
+}
+
+
+/***/ }),
+
+/***/ 85978:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sandboxIframesInContent: function() { return /* binding */ sandboxIframesInContent; }
+/* harmony export */ });
+/* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ 
+
+/**
+ * Add `sandbox=""` attribute to all `<iframe>` elements in the editor content
+ * @private
+ */ function sandboxIframesInContent(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.sandboxIframesInContent || !_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'IFRAME') {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    if (!elm.hasAttribute('sandbox')) {
+        (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'sandbox', '');
+        return true;
+    }
+    return hadEffect;
+}
+
+
 /***/ }),
 
 /***/ 384:
@@ -45180,9 +45386,15 @@ __webpack_require__.r(__webpack_exports__);
 /**
  * @private
  */ function sanitizeAttributes(jodit, nodeElm, hadEffect) {
-    if (_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) && (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
-        safeJavaScriptLink: jodit.options.cleanHTML.safeJavaScriptLink,
-        removeOnError: jodit.options.cleanHTML.removeOnError
+    if (!_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var opts = jodit.options.cleanHTML;
+    if ((0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
+        safeJavaScriptLink: opts.safeJavaScriptLink,
+        removeOnError: opts.removeOnError,
+        removeEventAttributes: opts.removeEventAttributes,
+        safeLinksTarget: opts.safeLinksTarget
     })) {
         return true;
     }
@@ -45190,6 +45402,117 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 15583:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sanitizeStyles: function() { return /* binding */ sanitizeStyles; }
+/* harmony export */ });
+/* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ 
+
+/**
+ * Filter CSS properties in style attributes based on allowedStyles whitelist
+ * @private
+ */ function sanitizeStyles(jodit, nodeElm, hadEffect) {
+    var allowedStyles = jodit.o.cleanHTML.allowedStyles;
+    if (!allowedStyles || !_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    var style = (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style');
+    if (!style) {
+        return hadEffect;
+    }
+    var tagName = nodeElm.nodeName.toLowerCase();
+    var allowed = getAllowedPropsForTag(tagName, allowedStyles);
+    if (!allowed) {
+        return hadEffect;
+    }
+    var filtered = filterStyleProperties(style, allowed);
+    if (filtered !== style) {
+        (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style', filtered || null);
+        return true;
+    }
+    return hadEffect;
+}
+function getAllowedPropsForTag(tagName, allowedStyles) {
+    var tagSpecific = allowedStyles[tagName];
+    var global = allowedStyles['*'];
+    if (!tagSpecific && !global) {
+        return null;
+    }
+    var set = new Set();
+    if (global) {
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = global[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var prop = _step.value;
+                set.add(prop.toLowerCase());
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+    }
+    if (tagSpecific) {
+        var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+        try {
+            for(var _iterator1 = tagSpecific[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
+                var prop1 = _step1.value;
+                set.add(prop1.toLowerCase());
+            }
+        } catch (err) {
+            _didIteratorError1 = true;
+            _iteratorError1 = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                    _iterator1.return();
+                }
+            } finally{
+                if (_didIteratorError1) {
+                    throw _iteratorError1;
+                }
+            }
+        }
+    }
+    return set;
+}
+function filterStyleProperties(style, allowed) {
+    return style.split(';').map(function(s) {
+        return s.trim();
+    }).filter(function(s) {
+        if (!s) {
+            return false;
+        }
+        var colonIdx = s.indexOf(':');
+        if (colonIdx === -1) {
+            return false;
+        }
+        var prop = s.substring(0, colonIdx).trim().toLowerCase();
+        return allowed.has(prop);
+    }).join('; ').replace(/;\s*$/, '');
+}
+
+
 /***/ }),
 
 /***/ 28800:
@@ -47225,7 +47548,7 @@ function _is_native_reflect_construct() {
                             'src'
                         ], 2), tagName = _ref[0], field = _ref[1];
                         fragment = this.j.createInside.element(tagName);
-                        fragment.setAttribute(field, (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(this.draggable, 'data-src') || (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(this.draggable, 'src') || '');
+                        (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(fragment, field, (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(this.draggable, 'data-src') || (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(this.draggable, 'src') || '');
                         if (tagName === 'a') {
                             fragment.textContent = (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(fragment, field) || '';
                         }
@@ -48110,13 +48433,15 @@ function brBefore(start) {
 /* harmony export */   insertParagraph: function() { return /* binding */ insertParagraph; }
 /* harmony export */ });
 /* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
-/* harmony import */ var _core_helpers_utils_scroll_into_view_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(26395);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/* harmony import */ var _core_helpers_utils_scroll_into_view_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(26395);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
  * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
  */ 
 
+
 /**
  * Insert default paragraph
  * @private
@@ -48126,11 +48451,11 @@ function brBefore(start) {
         p.appendChild(br);
     }
     if (style && style.cssText) {
-        p.setAttribute('style', style.cssText);
+        (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(p, 'style', style.cssText);
     }
     _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.after(fake, p);
     _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.before(isBR ? p : br, fake);
-    (0,_core_helpers_utils_scroll_into_view_js__WEBPACK_IMPORTED_MODULE_1__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
+    (0,_core_helpers_utils_scroll_into_view_js__WEBPACK_IMPORTED_MODULE_2__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
     return p;
 }
 
@@ -48307,8 +48632,9 @@ function brBefore(start) {
 /* unused harmony export file */
 /* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
 /* harmony import */ var _core_global_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(580);
-/* harmony import */ var _config_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6441);
-/* harmony import */ var _modules_widget_index_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(92762);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(29960);
+/* harmony import */ var _config_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(6441);
+/* harmony import */ var _modules_widget_index_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(92762);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -48317,7 +48643,8 @@ function brBefore(start) {
 
 
 
-_config_js__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
+
+_config_js__WEBPACK_IMPORTED_MODULE_3__.Config.prototype.controls.file = {
     popup: function popup(editor, current, close) {
         var insert = function insert(url) {
             var title = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : '';
@@ -48327,7 +48654,7 @@ _config_js__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
         if (current && (_core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') || _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor))) {
             sourceAnchor = _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') ? current : _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor);
         }
-        return (0,_modules_widget_index_js__WEBPACK_IMPORTED_MODULE_3__.FileSelectorWidget)(editor, {
+        return (0,_modules_widget_index_js__WEBPACK_IMPORTED_MODULE_4__.FileSelectorWidget)(editor, {
             filebrowser: function filebrowser(data) {
                 data.files && data.files.forEach(function(file) {
                     return insert(data.baseurl + file);
@@ -48337,8 +48664,8 @@ _config_js__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
             upload: true,
             url: function url(url, text) {
                 if (sourceAnchor) {
-                    sourceAnchor.setAttribute('href', url);
-                    sourceAnchor.setAttribute('title', text);
+                    (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'href', url);
+                    (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'title', text);
                 } else {
                     insert(url, text);
                 }
@@ -49439,8 +49766,8 @@ _config_js__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         if (opt.iframeCSSLinks) {
             opt.iframeCSSLinks.forEach(function(href) {
                 var link = doc.createElement('link');
-                link.setAttribute('rel', 'stylesheet');
-                link.setAttribute('href', href);
+                (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'rel', 'stylesheet');
+                (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'href', href);
                 doc.head && doc.head.appendChild(link);
             });
         }
@@ -49457,11 +49784,13 @@ _config_js__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         _$iframe.style.display = 'block';
         _$iframe.src = 'about:blank';
         _$iframe.className = 'jodit-wysiwyg_iframe';
-        _$iframe.setAttribute('allowtransparency', 'true');
-        _$iframe.setAttribute('tabindex', opt.tabIndex.toString());
-        _$iframe.setAttribute('frameborder', '0');
+        (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.attr)(_$iframe, {
+            allowtransparency: 'true',
+            tabindex: opt.tabIndex.toString(),
+            frameborder: '0'
+        });
         if (opt.iframeSandbox != null) {
-            _$iframe.setAttribute('sandbox', opt.iframeSandbox);
+            (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.attr)(_$iframe, 'sandbox', opt.iframeSandbox);
         }
         editor.workplace.appendChild(_$iframe);
         editor.iframe = _$iframe;
@@ -52859,6 +53188,12 @@ function _ts_generator(thisArg, body) {
         }
         (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'href', imageLink);
         (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'target', imageLinkOpenInNewTab ? '_blank' : null);
+        if (!imageLinkOpenInNewTab) {
+            var relParts = ((0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel') || '').split(/\s+/).filter(function(p) {
+                return p && p !== 'noopener' && p !== 'noreferrer';
+            });
+            (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel', relParts.length ? relParts.join(' ') : null);
+        }
     } else {
         if (link && link.parentNode) {
             link.parentNode.replaceChild(image, link);
@@ -52963,10 +53298,11 @@ function _ts_generator(thisArg, body) {
 /* harmony import */ var _core_dom_index_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(22732);
 /* harmony import */ var _core_global_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(580);
 /* harmony import */ var _core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(21537);
-/* harmony import */ var _core_ui_icon_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(12153);
-/* harmony import */ var _config_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(6441);
-/* harmony import */ var _modules_widget_index_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(92762);
-/* harmony import */ var _image_svg_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(25179);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(29960);
+/* harmony import */ var _core_ui_icon_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(12153);
+/* harmony import */ var _config_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(6441);
+/* harmony import */ var _modules_widget_index_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(92762);
+/* harmony import */ var _image_svg_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(25179);
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -53106,15 +53442,16 @@ function _ts_generator(thisArg, body) {
 
 
 
-_core_ui_icon_js__WEBPACK_IMPORTED_MODULE_3__.Icon.set('image', _image_svg_js__WEBPACK_IMPORTED_MODULE_6__["default"]);
-_config_js__WEBPACK_IMPORTED_MODULE_4__.Config.prototype.controls.image = {
+
+_core_ui_icon_js__WEBPACK_IMPORTED_MODULE_4__.Icon.set('image', _image_svg_js__WEBPACK_IMPORTED_MODULE_7__["default"]);
+_config_js__WEBPACK_IMPORTED_MODULE_5__.Config.prototype.controls.image = {
     popup: function popup(editor, current, close) {
         var sourceImage = null;
         if (current && !_core_dom_index_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isText(current) && _core_dom_index_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isHTMLElement(current) && (_core_dom_index_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'img') || (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.$$)('img', current).length)) {
             sourceImage = _core_dom_index_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'img') ? current : (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_2__.$$)('img', current)[0];
         }
         editor.s.save();
-        return (0,_modules_widget_index_js__WEBPACK_IMPORTED_MODULE_5__.FileSelectorWidget)(editor, {
+        return (0,_modules_widget_index_js__WEBPACK_IMPORTED_MODULE_6__.FileSelectorWidget)(editor, {
             filebrowser: function filebrowser(data) {
                 editor.s.restore();
                 data.files && data.files.forEach(function(file) {
@@ -53134,8 +53471,8 @@ _config_js__WEBPACK_IMPORTED_MODULE_4__.Config.prototype.controls.image = {
                                     url = '//' + url;
                                 }
                                 _$image = sourceImage || editor.createInside.element('img');
-                                _$image.setAttribute('src', url);
-                                _$image.setAttribute('alt', text);
+                                (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_3__.attr)(_$image, 'src', url);
+                                (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_3__.attr)(_$image, 'alt', text);
                                 if (!!sourceImage) return [
                                     3,
                                     2
@@ -55949,7 +56286,7 @@ function _is_native_reflect_construct() {
                 }
                 if (jodit.s.isCollapsed()) {
                     var a = jodit.createInside.element('a');
-                    a.setAttribute('href', html);
+                    (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(a, 'href', html);
                     a.textContent = html;
                     jodit.e.fire('applyLink', jodit, a, null);
                     return a;
@@ -56014,7 +56351,7 @@ function _is_native_reflect_construct() {
                         target_checkbox.checked = (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(_$link, 'target') === '_blank';
                     }
                     if (noFollowCheckbox && nofollow_checkbox) {
-                        nofollow_checkbox.checked = (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(_$link, 'rel') === 'nofollow';
+                        nofollow_checkbox.checked = ((0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(_$link, 'rel') || '').split(/\s+/).includes('nofollow');
                     }
                     insert.textContent = i18n('Update');
                 } else {
@@ -56082,7 +56419,14 @@ function _is_native_reflect_construct() {
                             (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(a, 'target', target_checkbox.checked ? '_blank' : null);
                         }
                         if (noFollowCheckbox && nofollow_checkbox) {
-                            (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(a, 'rel', nofollow_checkbox.checked ? 'nofollow' : null);
+                            var relParts = ((0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(a, 'rel') || '').split(/\s+/).filter(Boolean);
+                            var hasNofollow = relParts.includes('nofollow');
+                            if (nofollow_checkbox.checked && !hasNofollow) {
+                                relParts.push('nofollow');
+                            } else if (!nofollow_checkbox.checked && hasNofollow) {
+                                relParts.splice(relParts.indexOf('nofollow'), 1);
+                            }
+                            (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_3__.attr)(a, 'rel', relParts.length ? relParts.join(' ') : null);
                         }
                         jodit.e.fire('applyLink', jodit, a, form);
                     });
@@ -60497,8 +60841,8 @@ var keyBInd = '__jodit-resizer_binded';
                     this.j.e.off(element, 'mousedown.select touchstart.select').on(element, 'mousedown.select touchstart.select', function() {
                         _this.j.s.select(element);
                     }).off(element, 'changesize').on(element, 'changesize', function() {
-                        iframe.setAttribute('width', element.offsetWidth + 'px');
-                        iframe.setAttribute('height', element.offsetHeight + 'px');
+                        (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(iframe, 'width', element.offsetWidth + 'px');
+                        (0,_core_helpers_index_js__WEBPACK_IMPORTED_MODULE_4__.attr)(iframe, 'height', element.offsetHeight + 'px');
                     });
                 }
                 this.j.e.on(element, 'dragstart', this.hide);
@@ -64102,8 +64446,9 @@ var AceEditor = /*#__PURE__*/ function(SourceEditor) {
 /* harmony export */   TextAreaEditor: function() { return /* binding */ TextAreaEditor; }
 /* harmony export */ });
 /* harmony import */ var _core_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(2748);
-/* harmony import */ var _core_helpers_utils_css_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(41180);
-/* harmony import */ var _sourceEditor_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(23370);
+/* harmony import */ var _core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(29960);
+/* harmony import */ var _core_helpers_utils_css_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(41180);
+/* harmony import */ var _sourceEditor_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(23370);
 function _assert_this_initialized(self) {
     if (self === void 0) {
         throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
@@ -64184,6 +64529,7 @@ function _is_native_reflect_construct() {
  */ 
 
 
+
 var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
     "use strict";
     _inherits(TextAreaEditor, SourceEditor);
@@ -64208,7 +64554,7 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
                 });
                 this.container.appendChild(this.instance);
                 editor.e.on(this.instance, 'mousedown keydown touchstart input', editor.async.debounce(this.toWYSIWYG, editor.defaultTimeout)).on('setMinHeight.source', function(minHeightD) {
-                    (0,_core_helpers_utils_css_js__WEBPACK_IMPORTED_MODULE_1__.css)(_this.instance, 'minHeight', minHeightD);
+                    (0,_core_helpers_utils_css_js__WEBPACK_IMPORTED_MODULE_2__.css)(_this.instance, 'minHeight', minHeightD);
                 }).on(this.instance, 'change keydown mousedown touchstart input', this.autosize).on('afterSetMode.source', this.autosize).on(this.instance, 'mousedown focus', function(e) {
                     editor.e.fire(e.type, e);
                 });
@@ -64286,17 +64632,13 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
         {
             key: "setPlaceHolder",
             value: function setPlaceHolder(title) {
-                this.instance.setAttribute('placeholder', title);
+                (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(this.instance, 'placeholder', title);
             }
         },
         {
             key: "setReadOnly",
             value: function setReadOnly(isReadOnly) {
-                if (isReadOnly) {
-                    this.instance.setAttribute('readonly', 'true');
-                } else {
-                    this.instance.removeAttribute('readonly');
-                }
+                (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_1__.attr)(this.instance, 'readonly', isReadOnly ? 'true' : null);
             }
         },
         {
@@ -64325,7 +64667,7 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
         }
     ]);
     return TextAreaEditor;
-}(_sourceEditor_js__WEBPACK_IMPORTED_MODULE_2__.SourceEditor);
+}(_sourceEditor_js__WEBPACK_IMPORTED_MODULE_3__.SourceEditor);
 
 
 /***/ }),