jodit-pro 4.14.7 → 4.14.9

package/es2015/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.14.7
+ * Version: v4.14.9
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */
@@ -1771,7 +1771,7 @@ __webpack_require__.r(__webpack_exports__);
  * ```
  * @packageDocumentation
  * @module constants
- */ const APP_VERSION = "4.14.7";
+ */ const APP_VERSION = "4.14.9";
 // prettier-ignore
 const ES = "es2015";
 const IS_ES_MODERN = true;
@@ -26395,7 +26395,7 @@ const CLASS_PREVIEW = 'jodit-file-browser-preview', preview_tpl_next = (next = '
                     }
                 } : false,
                 {
-                    icon: 'upload',
+                    icon: 'download',
                     title: 'Download',
                     exec: ()=>{
                         const url = ga('href');
@@ -39490,6 +39490,25 @@ _config_js__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
                 }
                 return html;
             };
+            /**
+             * Replace the whole iframe document with the given HTML.
+             *
+             * The markup is parsed in an inert document first (no browsing
+             * context: scripts do not run, sub-resources are not fetched),
+             * sanitized there via `safeHTML`, and only then moved into the
+             * live document. `document.write` on the live document would
+             * execute inline scripts and event handlers while parsing,
+             * before the sanitizer had a chance to strip them, and the
+             * iframe is same-origin with the host page by default.
+             * A `<script>` the cleaner is configured to keep still never
+             * executes: nodes coming from an inert parser are flagged
+             * "already started", exactly like `innerHTML`.
+             * See GHSA-w3xv-x3fm-59ph.
+             */ const replaceDocument = (html)=>{
+                const inert = new DOMParser().parseFromString(html, 'text/html');
+                editor.e.fire('safeHTML', inert.documentElement);
+                doc.replaceChild(doc.adoptNode(inert.documentElement), doc.documentElement);
+            };
             if (docMode) {
                 const tag = editor.element.tagName;
                 if (tag !== 'TEXTAREA' && tag !== 'INPUT') {
@@ -39502,19 +39521,20 @@ _config_js__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
                     if (/<(html|body)/i.test(value)) {
                         const old = doc.documentElement.outerHTML;
                         if (clearMarkers(old) !== clearMarkers(value)) {
-                            doc.open();
-                            doc.write(editor.o.iframeDoctype + clearMarkers(value));
-                            doc.close();
+                            replaceDocument(clearMarkers(value));
                             editor.editor = doc.body;
-                            editor.e.fire('safeHTML', editor.editor);
                             toggleEditable();
                             editor.e.fire('prepareWYSIWYGEditor');
                             editor.e.stopPropagation('beforeSetNativeEditorValue');
                         }
-                    } else {
-                        doc.body.innerHTML = value;
+                        return true;
                     }
-                    return true;
+                    // A partial value goes through the regular
+                    // path: `clean-html` sanitizes it and the
+                    // editor assigns it to `doc.body` via
+                    // `innerHTML`. Writing the raw value here
+                    // would fire its event handlers first.
+                    return false;
                 }, {
                     top: true
                 });
@@ -53233,6 +53253,14 @@ _core_global_js__WEBPACK_IMPORTED_MODULE_2__.pluginSystem.add('xpath', xpath);
 /* harmony default export */ __webpack_exports__["default"] = ("<svg xmlns='http://www.w3.org/2000/svg' viewBox=\"0 0 24 24\" > <circle cx=\"12\" cy=\"12\" r=\"2.2\"/> <circle cx=\"12\" cy=\"5\" r=\"2.2\"/> <circle cx=\"12\" cy=\"19\" r=\"2.2\"/> </svg> ");
 
 
+/***/ }),
+
+/***/ 1647:
+/***/ (function(__unused_webpack_module, __webpack_exports__) {
+
+/* harmony default export */ __webpack_exports__["default"] = ("<svg xmlns='http://www.w3.org/2000/svg' viewBox=\"0 0 1792 1792\"> <path d=\"M1344 1344q0-26-19-45t-45-19-45 19-19 45 19 45 45 19 45-19 19-45zm256 0q0-26-19-45t-45-19-45 19-19 45 19 45 45 19 45-19 19-45zm128-224v320q0 40-28 68t-68 28h-1472q-40 0-68-28t-28-68v-320q0-40 28-68t68-28h465l135 136q58 56 136 56t136-56l136-136h464q40 0 68 28t28 68zm-325-569q17 41-14 70l-448 448q-18 19-45 19t-45-19l-448-448q-31-29-14-70 17-39 59-39h256v-448q0-26 19-45t45-19h256q26 0 45 19t19 45v448h256q42 0 59 39z\"/> </svg> ");
+
+
 /***/ }),
 
 /***/ 43478:
@@ -53274,23 +53302,24 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   check: function() { return /* reexport safe */ _check_svg_js__WEBPACK_IMPORTED_MODULE_7__["default"]; },
 /* harmony export */   chevron: function() { return /* reexport safe */ _chevron_svg_js__WEBPACK_IMPORTED_MODULE_8__["default"]; },
 /* harmony export */   dots: function() { return /* reexport safe */ _dots_svg_js__WEBPACK_IMPORTED_MODULE_9__["default"]; },
-/* harmony export */   eye: function() { return /* reexport safe */ _eye_svg_js__WEBPACK_IMPORTED_MODULE_10__["default"]; },
-/* harmony export */   file: function() { return /* reexport safe */ _file_svg_js__WEBPACK_IMPORTED_MODULE_11__["default"]; },
-/* harmony export */   folder: function() { return /* reexport safe */ _folder_svg_js__WEBPACK_IMPORTED_MODULE_12__["default"]; },
-/* harmony export */   info_circle: function() { return /* reexport safe */ _info_circle_svg_js__WEBPACK_IMPORTED_MODULE_13__["default"]; },
-/* harmony export */   left: function() { return /* reexport safe */ _left_svg_js__WEBPACK_IMPORTED_MODULE_14__["default"]; },
-/* harmony export */   lock: function() { return /* reexport safe */ _lock_svg_js__WEBPACK_IMPORTED_MODULE_15__["default"]; },
-/* harmony export */   ok: function() { return /* reexport safe */ _ok_svg_js__WEBPACK_IMPORTED_MODULE_16__["default"]; },
-/* harmony export */   pencil: function() { return /* reexport safe */ _pencil_svg_js__WEBPACK_IMPORTED_MODULE_17__["default"]; },
-/* harmony export */   plus: function() { return /* reexport safe */ _plus_svg_js__WEBPACK_IMPORTED_MODULE_18__["default"]; },
-/* harmony export */   resize_handler: function() { return /* reexport safe */ _resize_handler_svg_js__WEBPACK_IMPORTED_MODULE_19__["default"]; },
-/* harmony export */   right: function() { return /* reexport safe */ _right_svg_js__WEBPACK_IMPORTED_MODULE_20__["default"]; },
-/* harmony export */   save: function() { return /* reexport safe */ _save_svg_js__WEBPACK_IMPORTED_MODULE_21__["default"]; },
-/* harmony export */   settings: function() { return /* reexport safe */ _settings_svg_js__WEBPACK_IMPORTED_MODULE_22__["default"]; },
-/* harmony export */   unlock: function() { return /* reexport safe */ _unlock_svg_js__WEBPACK_IMPORTED_MODULE_23__["default"]; },
-/* harmony export */   update: function() { return /* reexport safe */ _update_svg_js__WEBPACK_IMPORTED_MODULE_24__["default"]; },
-/* harmony export */   upload: function() { return /* reexport safe */ _upload_svg_js__WEBPACK_IMPORTED_MODULE_25__["default"]; },
-/* harmony export */   valign: function() { return /* reexport safe */ _valign_svg_js__WEBPACK_IMPORTED_MODULE_26__["default"]; }
+/* harmony export */   download: function() { return /* reexport safe */ _download_svg_js__WEBPACK_IMPORTED_MODULE_10__["default"]; },
+/* harmony export */   eye: function() { return /* reexport safe */ _eye_svg_js__WEBPACK_IMPORTED_MODULE_11__["default"]; },
+/* harmony export */   file: function() { return /* reexport safe */ _file_svg_js__WEBPACK_IMPORTED_MODULE_12__["default"]; },
+/* harmony export */   folder: function() { return /* reexport safe */ _folder_svg_js__WEBPACK_IMPORTED_MODULE_13__["default"]; },
+/* harmony export */   info_circle: function() { return /* reexport safe */ _info_circle_svg_js__WEBPACK_IMPORTED_MODULE_14__["default"]; },
+/* harmony export */   left: function() { return /* reexport safe */ _left_svg_js__WEBPACK_IMPORTED_MODULE_15__["default"]; },
+/* harmony export */   lock: function() { return /* reexport safe */ _lock_svg_js__WEBPACK_IMPORTED_MODULE_16__["default"]; },
+/* harmony export */   ok: function() { return /* reexport safe */ _ok_svg_js__WEBPACK_IMPORTED_MODULE_17__["default"]; },
+/* harmony export */   pencil: function() { return /* reexport safe */ _pencil_svg_js__WEBPACK_IMPORTED_MODULE_18__["default"]; },
+/* harmony export */   plus: function() { return /* reexport safe */ _plus_svg_js__WEBPACK_IMPORTED_MODULE_19__["default"]; },
+/* harmony export */   resize_handler: function() { return /* reexport safe */ _resize_handler_svg_js__WEBPACK_IMPORTED_MODULE_20__["default"]; },
+/* harmony export */   right: function() { return /* reexport safe */ _right_svg_js__WEBPACK_IMPORTED_MODULE_21__["default"]; },
+/* harmony export */   save: function() { return /* reexport safe */ _save_svg_js__WEBPACK_IMPORTED_MODULE_22__["default"]; },
+/* harmony export */   settings: function() { return /* reexport safe */ _settings_svg_js__WEBPACK_IMPORTED_MODULE_23__["default"]; },
+/* harmony export */   unlock: function() { return /* reexport safe */ _unlock_svg_js__WEBPACK_IMPORTED_MODULE_24__["default"]; },
+/* harmony export */   update: function() { return /* reexport safe */ _update_svg_js__WEBPACK_IMPORTED_MODULE_25__["default"]; },
+/* harmony export */   upload: function() { return /* reexport safe */ _upload_svg_js__WEBPACK_IMPORTED_MODULE_26__["default"]; },
+/* harmony export */   valign: function() { return /* reexport safe */ _valign_svg_js__WEBPACK_IMPORTED_MODULE_27__["default"]; }
 /* harmony export */ });
 /* harmony import */ var _angle_down_svg_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(78173);
 /* harmony import */ var _angle_left_svg_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(16260);
@@ -53302,23 +53331,24 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _check_svg_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(7903);
 /* harmony import */ var _chevron_svg_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(58032);
 /* harmony import */ var _dots_svg_js__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(52507);
-/* harmony import */ var _eye_svg_js__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(43478);
-/* harmony import */ var _file_svg_js__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(60097);
-/* harmony import */ var _folder_svg_js__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(49155);
-/* harmony import */ var _info_circle_svg_js__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(17176);
-/* harmony import */ var _left_svg_js__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(57882);
-/* harmony import */ var _lock_svg_js__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(58908);
-/* harmony import */ var _ok_svg_js__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(24829);
-/* harmony import */ var _pencil_svg_js__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(4038);
-/* harmony import */ var _plus_svg_js__WEBPACK_IMPORTED_MODULE_18__ = __webpack_require__(45575);
-/* harmony import */ var _resize_handler_svg_js__WEBPACK_IMPORTED_MODULE_19__ = __webpack_require__(84858);
-/* harmony import */ var _right_svg_js__WEBPACK_IMPORTED_MODULE_20__ = __webpack_require__(445);
-/* harmony import */ var _save_svg_js__WEBPACK_IMPORTED_MODULE_21__ = __webpack_require__(36886);
-/* harmony import */ var _settings_svg_js__WEBPACK_IMPORTED_MODULE_22__ = __webpack_require__(10766);
-/* harmony import */ var _unlock_svg_js__WEBPACK_IMPORTED_MODULE_23__ = __webpack_require__(33651);
-/* harmony import */ var _update_svg_js__WEBPACK_IMPORTED_MODULE_24__ = __webpack_require__(20362);
-/* harmony import */ var _upload_svg_js__WEBPACK_IMPORTED_MODULE_25__ = __webpack_require__(12202);
-/* harmony import */ var _valign_svg_js__WEBPACK_IMPORTED_MODULE_26__ = __webpack_require__(80152);
+/* harmony import */ var _download_svg_js__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(1647);
+/* harmony import */ var _eye_svg_js__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(43478);
+/* harmony import */ var _file_svg_js__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(60097);
+/* harmony import */ var _folder_svg_js__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(49155);
+/* harmony import */ var _info_circle_svg_js__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(17176);
+/* harmony import */ var _left_svg_js__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(57882);
+/* harmony import */ var _lock_svg_js__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(58908);
+/* harmony import */ var _ok_svg_js__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(24829);
+/* harmony import */ var _pencil_svg_js__WEBPACK_IMPORTED_MODULE_18__ = __webpack_require__(4038);
+/* harmony import */ var _plus_svg_js__WEBPACK_IMPORTED_MODULE_19__ = __webpack_require__(45575);
+/* harmony import */ var _resize_handler_svg_js__WEBPACK_IMPORTED_MODULE_20__ = __webpack_require__(84858);
+/* harmony import */ var _right_svg_js__WEBPACK_IMPORTED_MODULE_21__ = __webpack_require__(445);
+/* harmony import */ var _save_svg_js__WEBPACK_IMPORTED_MODULE_22__ = __webpack_require__(36886);
+/* harmony import */ var _settings_svg_js__WEBPACK_IMPORTED_MODULE_23__ = __webpack_require__(10766);
+/* harmony import */ var _unlock_svg_js__WEBPACK_IMPORTED_MODULE_24__ = __webpack_require__(33651);
+/* harmony import */ var _update_svg_js__WEBPACK_IMPORTED_MODULE_25__ = __webpack_require__(20362);
+/* harmony import */ var _upload_svg_js__WEBPACK_IMPORTED_MODULE_26__ = __webpack_require__(12202);
+/* harmony import */ var _valign_svg_js__WEBPACK_IMPORTED_MODULE_27__ = __webpack_require__(80152);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -53355,6 +53385,7 @@ __webpack_require__.r(__webpack_exports__);
 
 
 
+
 
 
 /***/ }),