jodit-pro 4.17.2 → 4.17.5

package/es2015/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit-pro - PRO Version of Jodit Editor
  * Author: Chupurnov Valerii <chupurnov@gmail.com>
- * Version: v4.17.2
+ * Version: v4.17.5
  * Url: https://xdsoft.net/jodit/pro/
  * License(s): SEE LICENSE IN LICENSE.md
  */
@@ -1791,7 +1791,7 @@ __webpack_require__.r(__webpack_exports__);
  * ```
  * @packageDocumentation
  * @module constants
- */ const APP_VERSION = "4.17.2";
+ */ const APP_VERSION = "4.17.5";
 // prettier-ignore
 const ES = "es2015";
 const IS_ES_MODERN = true;
@@ -6070,6 +6070,21 @@ function isSmuggledForeignHtml(elm) {
             _dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(elm);
         }
     }
+    // `<noscript>` is parsed as markup in a document with scripting off (the
+    // inert document the value is sanitized in) and as raw text in one with
+    // scripting on (the live editor). The same serialized bytes therefore
+    // describe two different trees, and markup hidden as inert text in the
+    // first comes alive as elements in the second. The element has no use in
+    // editor content, so it goes, together with everything it carried.
+    const noscript = [];
+    _dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.each(box, (node)=>{
+        if (_dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(node) && node.nodeName === 'NOSCRIPT') {
+            noscript.push(node);
+        }
+    });
+    for (const elm of noscript){
+        _dom_dom_js__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(elm);
+    }
     const removeEvents = (_a = options.removeEventAttributes) !== null && _a !== void 0 ? _a : options.removeOnError;
     // Single synchronous traversal of the subtree. Besides removing event
     // handlers and `javascript:` links, `sanitizeHTMLElement` neutralises
@@ -18435,6 +18450,11 @@ let Jodit = Jodit_1 = class Jodit extends _modules_index_js__WEBPACK_IMPORTED_MO
         }
         if (this.editor) {
             this.editor.innerHTML = data.value;
+            // Fired synchronously, before any task can run: the value was
+            // sanitized in an inert document and re-parsed here with scripting
+            // on, and the two parsers do not always agree. Listeners get to
+            // look at the tree that actually exists.
+            this.e.fire('afterSetNativeEditorValue');
         }
     }
     /**
@@ -35616,6 +35636,15 @@ class cleanHtml extends _core_plugin_plugin_js__WEBPACK_IMPORTED_MODULE_5__.Plug
             return false;
         }
     }
+    /**
+     * The value was sanitized in an inert document and has just been re-parsed
+     * into the live editor with scripting on. Where the two parsers disagree
+     * (`<noscript>`, raw-text elements), markup that was inert text a moment
+     * ago is a real element now, so the live tree is sanitized once more, in
+     * the same call stack, before any handler it might carry can fire.
+     */ onAfterSetNativeEditorValue() {
+        ;(0,_core_helpers_html_safe_html_js__WEBPACK_IMPORTED_MODULE_4__.safeHTML)(this.j.editor, this.j.o.cleanHTML);
+    }
     /**
      * Event handler when manually assigning a value to the HTML editor.
      */ onBeforeSetNativeEditorValue(data) {
@@ -35745,6 +35774,9 @@ __decorate([
 __decorate([
     (0,_core_decorators_index_js__WEBPACK_IMPORTED_MODULE_0__.watch)(':beforeCommand')
 ], cleanHtml.prototype, "beforeCommand", null);
+__decorate([
+    (0,_core_decorators_index_js__WEBPACK_IMPORTED_MODULE_0__.watch)(':afterSetNativeEditorValue')
+], cleanHtml.prototype, "onAfterSetNativeEditorValue", null);
 __decorate([
     (0,_core_decorators_index_js__WEBPACK_IMPORTED_MODULE_0__.watch)(':beforeSetNativeEditorValue')
 ], cleanHtml.prototype, "onBeforeSetNativeEditorValue", null);