jodit-pro 4.12.8 → 4.12.10

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.12.8
+ * Version: v4.12.10
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */
@@ -2258,7 +2258,7 @@ function _unsupported_iterable_to_array(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
 }
-var APP_VERSION = "4.12.8";
+var APP_VERSION = "4.12.10";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -54411,13 +54411,16 @@ _config_js__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.popup = {
  * Released under MIT see LICENSE.txt in the project root for license information.
  * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
  */ 
+var isSafeHref = function isSafeHref(href) {
+    return /^(https?:|mailto:|tel:)/i.test(href.trim()) && !/^(javascript:|data:|vbscript:)/i.test(href.trim());
+};
 /* harmony default export */ __webpack_exports__["default"] = ([
     {
         name: 'eye',
         tooltip: 'Open link',
         exec: function exec(editor, current) {
             var href = (0,_core_helpers_utils_attr_js__WEBPACK_IMPORTED_MODULE_0__.attr)(current, 'href');
-            if (current && href) {
+            if (current && href && isSafeHref(href)) {
                 editor.ow.open(href);
             }
         }
@@ -66130,6 +66133,9 @@ function _unsupported_iterable_to_array(o, minLen) {
  * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
  */ function execSpellCommand(jodit, commandSentence) {
     var _commandSentence_split = _sliced_to_array(commandSentence.split('::'), 2), command = _commandSentence_split[0], value = _commandSentence_split[1];
+    if (command.toLowerCase() === 'open' && value && /^(javascript:|data:|vbscript:)/i.test(value.trim())) {
+        return;
+    }
     jodit.execCommand(command, null, value);
 }
 

package/es5/jodit.min.css

@@ -1,14 +1,14 @@
 /*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.12.8
+ * Version: v4.12.10
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */
 	/*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.12.8
+ * Version: v4.12.10
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */