jodit 4.10.3 → 4.11.3

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.10.3
+ * Version: v4.11.3
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -2022,7 +2022,7 @@ __webpack_require__.r(__webpack_exports__);
  * @packageDocumentation
  * @module constants
  */ 
-var APP_VERSION = "4.10.3";
+var APP_VERSION = "4.11.3";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -6882,21 +6882,77 @@ function normalizeCSS(s) {
 /**
  * Removes dangerous constructs from HTML
  */ function safeHTML(box, options) {
+    var _options_removeEventAttributes;
     if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(box) && !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isFragment(box)) {
         return;
     }
-    if (options.removeOnError) {
-        sanitizeHTMLElement(box);
+    var removeEvents = (_options_removeEventAttributes = options.removeEventAttributes) !== null && _options_removeEventAttributes !== void 0 ? _options_removeEventAttributes : options.removeOnError;
+    if (removeEvents) {
+        removeAllEventAttributes(box);
+        (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('*', box).forEach(function(elm) {
+            return removeAllEventAttributes(elm);
+        });
+    } else if (options.removeOnError) {
+        sanitizeHTMLElement(box, options);
         (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('[onerror]', box).forEach(function(elm) {
             return sanitizeHTMLElement(elm, options);
         });
     }
     if (options.safeJavaScriptLink) {
-        sanitizeHTMLElement(box);
+        sanitizeHTMLElement(box, options);
         (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('a[href^="javascript"]', box).forEach(function(elm) {
             return sanitizeHTMLElement(elm, options);
         });
     }
+    if (options.safeLinksTarget) {
+        (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('a[target="_blank"]', box).forEach(function(elm) {
+            var rel = elm.getAttribute('rel') || '';
+            var parts = rel.split(/\s+/).filter(Boolean);
+            if (!parts.includes('noopener')) {
+                parts.push('noopener');
+            }
+            if (!parts.includes('noreferrer')) {
+                parts.push('noreferrer');
+            }
+            (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        });
+    }
+}
+/**
+ * Remove all on* event handler attributes from an element
+ */ function removeAllEventAttributes(elm) {
+    if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(elm)) {
+        return false;
+    }
+    var effected = false;
+    var toRemove = [];
+    for(var i = 0; i < elm.attributes.length; i++){
+        if (elm.attributes[i].name.toLowerCase().startsWith('on')) {
+            toRemove.push(elm.attributes[i].name);
+        }
+    }
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = toRemove[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var name = _step.value;
+            elm.removeAttribute(name);
+            effected = true;
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return effected;
 }
 function sanitizeHTMLElement(elm) {
     var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {
@@ -32105,6 +32161,10 @@ jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_10__.Icon.set('class-span', (_class_
         {
             key: "onSafeHTML",
             value: function onSafeHTML(sandBox) {
+                var sanitizer = this.j.o.cleanHTML.sanitizer;
+                if (sanitizer) {
+                    sandBox.innerHTML = sanitizer(sandBox.innerHTML);
+                }
                 (0,jodit_core_helpers_html_safe_html__WEBPACK_IMPORTED_MODULE_12__.safeHTML)(sandBox, this.j.o.cleanHTML);
             }
         },
@@ -32170,10 +32230,19 @@ jodit_config__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.cleanHTML = {
         b: 'strong'
     },
     allowTags: false,
-    denyTags: 'script',
+    denyTags: 'script,iframe,object,embed',
     useIframeSandbox: false,
     removeOnError: true,
+    removeEventAttributes: true,
     safeJavaScriptLink: true,
+    safeLinksTarget: true,
+    allowedStyles: false,
+    sanitizer: false,
+    sandboxIframesInContent: true,
+    convertUnsafeEmbeds: [
+        'object',
+        'embed'
+    ],
     disableCleanFilter: null
 };
 jodit_config__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.controls.eraser = {
@@ -32437,6 +32506,56 @@ jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_0__.Icon.set('eraser', (_eraser_svg_
 }
 
 
+/***/ }),
+
+/***/ 85085:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   convertUnsafeEmbeds: function() { return /* binding */ convertUnsafeEmbeds; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Convert `<object>` and `<embed>` elements to safer `<iframe>` elements.
+ * @private
+ */ function convertUnsafeEmbeds(jodit, nodeElm, hadEffect) {
+    var opt = jodit.o.cleanHTML.convertUnsafeEmbeds;
+    if (!opt || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var tag = nodeElm.nodeName.toLowerCase();
+    if (!opt.includes(tag)) {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    var src = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'data') || (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'src') || (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'movie') || '';
+    if (!src) {
+        jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(elm);
+        return true;
+    }
+    var iframe = jodit.createInside.element('iframe');
+    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(iframe, {
+        src: src,
+        sandbox: '',
+        frameborder: '0',
+        width: (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'width'),
+        height: (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'height')
+    });
+    jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.replace(elm, iframe, undefined, false, true);
+    return true;
+}
+
+
 /***/ }),
 
 /***/ 39188:
@@ -32484,20 +32603,28 @@ var TABLE_CONTAINER_TAGS = new Set([
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   allowAttributes: function() { return /* reexport safe */ _allow_attributes__WEBPACK_IMPORTED_MODULE_0__.allowAttributes; },
-/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_1__.fillEmptyParagraph; },
-/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_2__.removeEmptyTextNode; },
-/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_3__.removeInvTextNodes; },
-/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags__WEBPACK_IMPORTED_MODULE_4__.replaceOldTags; },
-/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes__WEBPACK_IMPORTED_MODULE_5__.sanitizeAttributes; },
-/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node__WEBPACK_IMPORTED_MODULE_6__.tryRemoveNode; }
+/* harmony export */   convertUnsafeEmbeds: function() { return /* reexport safe */ _convert_unsafe_embeds__WEBPACK_IMPORTED_MODULE_1__.convertUnsafeEmbeds; },
+/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_2__.fillEmptyParagraph; },
+/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_3__.removeEmptyTextNode; },
+/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_4__.removeInvTextNodes; },
+/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags__WEBPACK_IMPORTED_MODULE_5__.replaceOldTags; },
+/* harmony export */   safeLinksTarget: function() { return /* reexport safe */ _safe_links_target__WEBPACK_IMPORTED_MODULE_6__.safeLinksTarget; },
+/* harmony export */   sandboxIframesInContent: function() { return /* reexport safe */ _sandbox_iframes_in_content__WEBPACK_IMPORTED_MODULE_7__.sandboxIframesInContent; },
+/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes__WEBPACK_IMPORTED_MODULE_8__.sanitizeAttributes; },
+/* harmony export */   sanitizeStyles: function() { return /* reexport safe */ _sanitize_styles__WEBPACK_IMPORTED_MODULE_9__.sanitizeStyles; },
+/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node__WEBPACK_IMPORTED_MODULE_10__.tryRemoveNode; }
 /* harmony export */ });
 /* harmony import */ var _allow_attributes__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(95559);
-/* harmony import */ var _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(39188);
-/* harmony import */ var _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(94561);
-/* harmony import */ var _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53514);
-/* harmony import */ var _replace_old_tags__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(35104);
-/* harmony import */ var _sanitize_attributes__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(65015);
-/* harmony import */ var _try_remove_node__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(27611);
+/* harmony import */ var _convert_unsafe_embeds__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(85085);
+/* harmony import */ var _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39188);
+/* harmony import */ var _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(94561);
+/* harmony import */ var _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(53514);
+/* harmony import */ var _replace_old_tags__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(35104);
+/* harmony import */ var _safe_links_target__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(77041);
+/* harmony import */ var _sandbox_iframes_in_content__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(66647);
+/* harmony import */ var _sanitize_attributes__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(65015);
+/* harmony import */ var _sanitize_styles__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(60220);
+/* harmony import */ var _try_remove_node__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(27611);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -32515,6 +32642,10 @@ __webpack_require__.r(__webpack_exports__);
 
 
 
+
+
+
+
 /***/ }),
 
 /***/ 94561:
@@ -32631,6 +32762,90 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 77041:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   safeLinksTarget: function() { return /* binding */ safeLinksTarget; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Automatically add `rel="noopener noreferrer"` to links with `target="_blank"`
+ * @private
+ */ function safeLinksTarget(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.safeLinksTarget || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'A') {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    if ((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'target') !== '_blank') {
+        return hadEffect;
+    }
+    var rel = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel') || '';
+    var parts = rel.split(/\s+/).filter(Boolean);
+    var changed = false;
+    if (!parts.includes('noopener')) {
+        parts.push('noopener');
+        changed = true;
+    }
+    if (!parts.includes('noreferrer')) {
+        parts.push('noreferrer');
+        changed = true;
+    }
+    if (changed) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        return true;
+    }
+    return hadEffect;
+}
+
+
+/***/ }),
+
+/***/ 66647:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sandboxIframesInContent: function() { return /* binding */ sandboxIframesInContent; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Add `sandbox=""` attribute to all `<iframe>` elements in the editor content
+ * @private
+ */ function sandboxIframesInContent(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.sandboxIframesInContent || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'IFRAME') {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    if (!elm.hasAttribute('sandbox')) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'sandbox', '');
+        return true;
+    }
+    return hadEffect;
+}
+
+
 /***/ }),
 
 /***/ 65015:
@@ -32653,9 +32868,15 @@ __webpack_require__.r(__webpack_exports__);
 /**
  * @private
  */ function sanitizeAttributes(jodit, nodeElm, hadEffect) {
-    if (jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) && (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
-        safeJavaScriptLink: jodit.options.cleanHTML.safeJavaScriptLink,
-        removeOnError: jodit.options.cleanHTML.removeOnError
+    if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var opts = jodit.options.cleanHTML;
+    if ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
+        safeJavaScriptLink: opts.safeJavaScriptLink,
+        removeOnError: opts.removeOnError,
+        removeEventAttributes: opts.removeEventAttributes,
+        safeLinksTarget: opts.safeLinksTarget
     })) {
         return true;
     }
@@ -32663,6 +32884,120 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 60220:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sanitizeStyles: function() { return /* binding */ sanitizeStyles; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Filter CSS properties in style attributes based on allowedStyles whitelist
+ * @private
+ */ function sanitizeStyles(jodit, nodeElm, hadEffect) {
+    var allowedStyles = jodit.o.cleanHTML.allowedStyles;
+    if (!allowedStyles || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    var elm = nodeElm;
+    var style = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style');
+    if (!style) {
+        return hadEffect;
+    }
+    var tagName = nodeElm.nodeName.toLowerCase();
+    var allowed = getAllowedPropsForTag(tagName, allowedStyles);
+    if (!allowed) {
+        return hadEffect;
+    }
+    var filtered = filterStyleProperties(style, allowed);
+    if (filtered !== style) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style', filtered || null);
+        return true;
+    }
+    return hadEffect;
+}
+function getAllowedPropsForTag(tagName, allowedStyles) {
+    var tagSpecific = allowedStyles[tagName];
+    var global = allowedStyles['*'];
+    if (!tagSpecific && !global) {
+        return null;
+    }
+    var set = new Set();
+    if (global) {
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = global[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var prop = _step.value;
+                set.add(prop.toLowerCase());
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+    }
+    if (tagSpecific) {
+        var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+        try {
+            for(var _iterator1 = tagSpecific[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
+                var prop1 = _step1.value;
+                set.add(prop1.toLowerCase());
+            }
+        } catch (err) {
+            _didIteratorError1 = true;
+            _iteratorError1 = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                    _iterator1.return();
+                }
+            } finally{
+                if (_didIteratorError1) {
+                    throw _iteratorError1;
+                }
+            }
+        }
+    }
+    return set;
+}
+function filterStyleProperties(style, allowed) {
+    return style.split(';').map(function(s) {
+        return s.trim();
+    }).filter(function(s) {
+        if (!s) {
+            return false;
+        }
+        var colonIdx = s.indexOf(':');
+        if (colonIdx === -1) {
+            return false;
+        }
+        var prop = s.substring(0, colonIdx).trim().toLowerCase();
+        return allowed.has(prop);
+    }).join('; ').replace(/;\s*$/, '');
+}
+
+
 /***/ }),
 
 /***/ 27611:
@@ -34304,7 +34639,7 @@ jodit_core_global__WEBPACK_IMPORTED_MODULE_9__.pluginSystem.add('dragAndDropElem
                             'src'
                         ], 2), tagName = _ref[0], field = _ref[1];
                         fragment = this.j.createInside.element(tagName);
-                        fragment.setAttribute(field, (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(this.draggable, 'data-src') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(this.draggable, 'src') || '');
+                        (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(fragment, field, (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(this.draggable, 'data-src') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(this.draggable, 'src') || '');
                         if (tagName === 'a') {
                             fragment.textContent = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_12__.attr)(fragment, field) || '';
                         }
@@ -35000,7 +35335,8 @@ function brBefore(start) {
 /* harmony export */   insertParagraph: function() { return /* binding */ insertParagraph; }
 /* harmony export */ });
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(60898);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(60898);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -35009,6 +35345,7 @@ function brBefore(start) {
  * @module plugins/enter
  */ 
 
+
 /**
  * Insert default paragraph
  * @private
@@ -35018,11 +35355,11 @@ function brBefore(start) {
         p.appendChild(br);
     }
     if (style && style.cssText) {
-        p.setAttribute('style', style.cssText);
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(p, 'style', style.cssText);
     }
     jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.after(fake, p);
     jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.before(isBR ? p : br, fake);
-    (0,jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_1__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
+    (0,jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_2__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
     return p;
 }
 
@@ -35212,8 +35549,9 @@ function brBefore(start) {
 /* unused harmony export file */
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
 /* harmony import */ var jodit_core_global__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(28077);
-/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(5266);
-/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(15753);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(7909);
+/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(5266);
+/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(15753);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -35226,7 +35564,8 @@ function brBefore(start) {
 
 
 
-jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
+
+jodit_config__WEBPACK_IMPORTED_MODULE_3__.Config.prototype.controls.file = {
     popup: function popup(editor, current, close) {
         var insert = function insert(url) {
             var title = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : '';
@@ -35236,7 +35575,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
         if (current && (jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') || jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor))) {
             sourceAnchor = jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') ? current : jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor);
         }
-        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_3__.FileSelectorWidget)(editor, {
+        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_4__.FileSelectorWidget)(editor, {
             filebrowser: function filebrowser(data) {
                 data.files && data.files.forEach(function(file) {
                     return insert(data.baseurl + file);
@@ -35246,8 +35585,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
             upload: true,
             url: function url(url, text) {
                 if (sourceAnchor) {
-                    sourceAnchor.setAttribute('href', url);
-                    sourceAnchor.setAttribute('title', text);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'href', url);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'title', text);
                 } else {
                     insert(url, text);
                 }
@@ -36158,8 +36497,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         if (opt.iframeCSSLinks) {
             opt.iframeCSSLinks.forEach(function(href) {
                 var link = doc.createElement('link');
-                link.setAttribute('rel', 'stylesheet');
-                link.setAttribute('href', href);
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'rel', 'stylesheet');
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'href', href);
                 doc.head && doc.head.appendChild(link);
             });
         }
@@ -36176,11 +36515,13 @@ jodit_config__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         _$iframe.style.display = 'block';
         _$iframe.src = 'about:blank';
         _$iframe.className = 'jodit-wysiwyg_iframe';
-        _$iframe.setAttribute('allowtransparency', 'true');
-        _$iframe.setAttribute('tabindex', opt.tabIndex.toString());
-        _$iframe.setAttribute('frameborder', '0');
+        (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(_$iframe, {
+            allowtransparency: 'true',
+            tabindex: opt.tabIndex.toString(),
+            frameborder: '0'
+        });
         if (opt.iframeSandbox != null) {
-            _$iframe.setAttribute('sandbox', opt.iframeSandbox);
+            (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(_$iframe, 'sandbox', opt.iframeSandbox);
         }
         editor.workplace.appendChild(_$iframe);
         editor.iframe = _$iframe;
@@ -38294,6 +38635,12 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_6__.__
         }
         (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'href', imageLink);
         (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'target', imageLinkOpenInNewTab ? '_blank' : null);
+        if (!imageLinkOpenInNewTab) {
+            var relParts = ((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel') || '').split(/\s+/).filter(function(p) {
+                return p && p !== 'noopener' && p !== 'noreferrer';
+            });
+            (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel', relParts.length ? relParts.join(' ') : null);
+        }
     } else {
         if (link && link.parentNode) {
             link.parentNode.replaceChild(image, link);
@@ -38405,11 +38752,12 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_6__.__
 /* harmony import */ var jodit_core_dom__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(27795);
 /* harmony import */ var jodit_core_global__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(28077);
 /* harmony import */ var jodit_core_helpers__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(65946);
-/* harmony import */ var jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(29434);
-/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(5266);
-/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(15753);
-/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(64831);
-/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(_image_svg__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(29434);
+/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(5266);
+/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(15753);
+/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(64831);
+/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(_image_svg__WEBPACK_IMPORTED_MODULE_9__);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -38427,15 +38775,16 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_6__.__
 
 
 
-jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_5__.Icon.set('image', (_image_svg__WEBPACK_IMPORTED_MODULE_8___default()));
-jodit_config__WEBPACK_IMPORTED_MODULE_6__.Config.prototype.controls.image = {
+
+jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_6__.Icon.set('image', (_image_svg__WEBPACK_IMPORTED_MODULE_9___default()));
+jodit_config__WEBPACK_IMPORTED_MODULE_7__.Config.prototype.controls.image = {
     popup: function popup(editor, current, close) {
         var sourceImage = null;
         if (current && !jodit_core_dom__WEBPACK_IMPORTED_MODULE_2__.Dom.isText(current) && jodit_core_dom__WEBPACK_IMPORTED_MODULE_2__.Dom.isHTMLElement(current) && (jodit_core_dom__WEBPACK_IMPORTED_MODULE_2__.Dom.isTag(current, 'img') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_4__.$$)('img', current).length)) {
             sourceImage = jodit_core_dom__WEBPACK_IMPORTED_MODULE_2__.Dom.isTag(current, 'img') ? current : (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_4__.$$)('img', current)[0];
         }
         editor.s.save();
-        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_7__.FileSelectorWidget)(editor, {
+        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_8__.FileSelectorWidget)(editor, {
             filebrowser: function filebrowser(data) {
                 editor.s.restore();
                 data.files && data.files.forEach(function(file) {
@@ -38455,8 +38804,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_6__.Config.prototype.controls.image = {
                                     url = '//' + url;
                                 }
                                 _$image = sourceImage || editor.createInside.element('img');
-                                _$image.setAttribute('src', url);
-                                _$image.setAttribute('alt', text);
+                                (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_5__.attr)(_$image, 'src', url);
+                                (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_5__.attr)(_$image, 'alt', text);
                                 if (!!sourceImage) return [
                                     3,
                                     2
@@ -40731,7 +41080,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                 }
                 if (jodit.s.isCollapsed()) {
                     var a = jodit.createInside.element('a');
-                    a.setAttribute('href', html);
+                    (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(a, 'href', html);
                     a.textContent = html;
                     jodit.e.fire('applyLink', jodit, a, null);
                     return a;
@@ -40796,7 +41145,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                         target_checkbox.checked = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(_$link, 'target') === '_blank';
                     }
                     if (noFollowCheckbox && nofollow_checkbox) {
-                        nofollow_checkbox.checked = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(_$link, 'rel') === 'nofollow';
+                        nofollow_checkbox.checked = ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(_$link, 'rel') || '').split(/\s+/).includes('nofollow');
                     }
                     insert.textContent = i18n('Update');
                 } else {
@@ -40864,7 +41213,14 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                             (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(a, 'target', target_checkbox.checked ? '_blank' : null);
                         }
                         if (noFollowCheckbox && nofollow_checkbox) {
-                            (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(a, 'rel', nofollow_checkbox.checked ? 'nofollow' : null);
+                            var relParts = ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(a, 'rel') || '').split(/\s+/).filter(Boolean);
+                            var hasNofollow = relParts.includes('nofollow');
+                            if (nofollow_checkbox.checked && !hasNofollow) {
+                                relParts.push('nofollow');
+                            } else if (!nofollow_checkbox.checked && hasNofollow) {
+                                relParts.splice(relParts.indexOf('nofollow'), 1);
+                            }
+                            (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_10__.attr)(a, 'rel', relParts.length ? relParts.join(' ') : null);
                         }
                         jodit.e.fire('applyLink', jodit, a, form);
                     });
@@ -44038,8 +44394,8 @@ var keyBInd = '__jodit-resizer_binded';
                     this.j.e.off(element, 'mousedown.select touchstart.select').on(element, 'mousedown.select touchstart.select', function() {
                         _this.j.s.select(element);
                     }).off(element, 'changesize').on(element, 'changesize', function() {
-                        iframe.setAttribute('width', element.offsetWidth + 'px');
-                        iframe.setAttribute('height', element.offsetHeight + 'px');
+                        (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_11__.attr)(iframe, 'width', element.offsetWidth + 'px');
+                        (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_11__.attr)(iframe, 'height', element.offsetHeight + 'px');
                     });
                 }
                 this.j.e.on(element, 'dragstart', this.hide);
@@ -46663,8 +47019,9 @@ var AceEditor = /*#__PURE__*/ function(SourceEditor) {
 /* harmony import */ var _swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(25045);
 /* harmony import */ var _swc_helpers_inherits__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34918);
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(23211);
-/* harmony import */ var jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(80991);
-/* harmony import */ var jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(94193);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(80991);
+/* harmony import */ var jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(94193);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -46679,6 +47036,7 @@ var AceEditor = /*#__PURE__*/ function(SourceEditor) {
 
 
 
+
 var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
     "use strict";
     (0,_swc_helpers_inherits__WEBPACK_IMPORTED_MODULE_4__._)(TextAreaEditor, SourceEditor);
@@ -46702,7 +47060,7 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
                 });
                 this.container.appendChild(this.instance);
                 editor.e.on(this.instance, 'mousedown keydown touchstart input', editor.async.debounce(this.toWYSIWYG, editor.defaultTimeout)).on('setMinHeight.source', function(minHeightD) {
-                    (0,jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_6__.css)(_this.instance, 'minHeight', minHeightD);
+                    (0,jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_7__.css)(_this.instance, 'minHeight', minHeightD);
                 }).on(this.instance, 'change keydown mousedown touchstart input', this.autosize).on('afterSetMode.source', this.autosize).on(this.instance, 'mousedown focus', function(e) {
                     editor.e.fire(e.type, e);
                 });
@@ -46780,17 +47138,13 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
         {
             key: "setPlaceHolder",
             value: function setPlaceHolder(title) {
-                this.instance.setAttribute('placeholder', title);
+                (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_6__.attr)(this.instance, 'placeholder', title);
             }
         },
         {
             key: "setReadOnly",
             value: function setReadOnly(isReadOnly) {
-                if (isReadOnly) {
-                    this.instance.setAttribute('readonly', 'true');
-                } else {
-                    this.instance.removeAttribute('readonly');
-                }
+                (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_6__.attr)(this.instance, 'readonly', isReadOnly ? 'true' : null);
             }
         },
         {
@@ -46819,7 +47173,7 @@ var TextAreaEditor = /*#__PURE__*/ function(SourceEditor) {
         }
     ]);
     return TextAreaEditor;
-}(jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_7__.SourceEditor);
+}(jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_8__.SourceEditor);
 
 
 /***/ }),