jodit 4.10.3 → 4.11.3

package/es2015/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.10.3
+ * Version: v4.11.3
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -1764,7 +1764,7 @@ __webpack_require__.r(__webpack_exports__);
  * ```
  * @packageDocumentation
  * @module constants
- */ const APP_VERSION = "4.10.3";
+ */ const APP_VERSION = "4.11.3";
 // prettier-ignore
 const ES = "es2015";
 const IS_ES_MODERN = true;
@@ -5954,17 +5954,54 @@ function normalizeCSS(s) {
 /**
  * Removes dangerous constructs from HTML
  */ function safeHTML(box, options) {
+    var _options_removeEventAttributes;
     if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(box) && !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isFragment(box)) {
         return;
     }
-    if (options.removeOnError) {
-        sanitizeHTMLElement(box);
+    const removeEvents = (_options_removeEventAttributes = options.removeEventAttributes) !== null && _options_removeEventAttributes !== void 0 ? _options_removeEventAttributes : options.removeOnError;
+    if (removeEvents) {
+        removeAllEventAttributes(box);
+        (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('*', box).forEach((elm)=>removeAllEventAttributes(elm));
+    } else if (options.removeOnError) {
+        sanitizeHTMLElement(box, options);
         (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('[onerror]', box).forEach((elm)=>sanitizeHTMLElement(elm, options));
     }
     if (options.safeJavaScriptLink) {
-        sanitizeHTMLElement(box);
+        sanitizeHTMLElement(box, options);
         (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('a[href^="javascript"]', box).forEach((elm)=>sanitizeHTMLElement(elm, options));
     }
+    if (options.safeLinksTarget) {
+        (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.$$)('a[target="_blank"]', box).forEach((elm)=>{
+            const rel = elm.getAttribute('rel') || '';
+            const parts = rel.split(/\s+/).filter(Boolean);
+            if (!parts.includes('noopener')) {
+                parts.push('noopener');
+            }
+            if (!parts.includes('noreferrer')) {
+                parts.push('noreferrer');
+            }
+            (0,jodit_core_helpers_utils__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        });
+    }
+}
+/**
+ * Remove all on* event handler attributes from an element
+ */ function removeAllEventAttributes(elm) {
+    if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(elm)) {
+        return false;
+    }
+    let effected = false;
+    const toRemove = [];
+    for(let i = 0; i < elm.attributes.length; i++){
+        if (elm.attributes[i].name.toLowerCase().startsWith('on')) {
+            toRemove.push(elm.attributes[i].name);
+        }
+    }
+    for (const name of toRemove){
+        elm.removeAttribute(name);
+        effected = true;
+    }
+    return effected;
 }
 function sanitizeHTMLElement(elm, { safeJavaScriptLink, removeOnError } = {
     safeJavaScriptLink: true,
@@ -26852,6 +26889,10 @@ jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_5__.Icon.set('class-span', (_class_s
         return false;
     }
     onSafeHTML(sandBox) {
+        const sanitizer = this.j.o.cleanHTML.sanitizer;
+        if (sanitizer) {
+            sandBox.innerHTML = sanitizer(sandBox.innerHTML);
+        }
         (0,jodit_core_helpers_html_safe_html__WEBPACK_IMPORTED_MODULE_6__.safeHTML)(sandBox, this.j.o.cleanHTML);
     }
     /** @override */ beforeDestruct() {
@@ -26921,10 +26962,19 @@ jodit_config__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.cleanHTML = {
         b: 'strong'
     },
     allowTags: false,
-    denyTags: 'script',
+    denyTags: 'script,iframe,object,embed',
     useIframeSandbox: false,
     removeOnError: true,
+    removeEventAttributes: true,
     safeJavaScriptLink: true,
+    safeLinksTarget: true,
+    allowedStyles: false,
+    sanitizer: false,
+    sandboxIframesInContent: true,
+    convertUnsafeEmbeds: [
+        'object',
+        'embed'
+    ],
     disableCleanFilter: null
 };
 jodit_config__WEBPACK_IMPORTED_MODULE_1__.Config.prototype.controls.eraser = {
@@ -27186,6 +27236,56 @@ jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_0__.Icon.set('eraser', (_eraser_svg_
 }
 
 
+/***/ }),
+
+/***/ 85085:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   convertUnsafeEmbeds: function() { return /* binding */ convertUnsafeEmbeds; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Convert `<object>` and `<embed>` elements to safer `<iframe>` elements.
+ * @private
+ */ function convertUnsafeEmbeds(jodit, nodeElm, hadEffect) {
+    const opt = jodit.o.cleanHTML.convertUnsafeEmbeds;
+    if (!opt || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    const tag = nodeElm.nodeName.toLowerCase();
+    if (!opt.includes(tag)) {
+        return hadEffect;
+    }
+    const elm = nodeElm;
+    const src = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'data') || (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'src') || (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'movie') || '';
+    if (!src) {
+        jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(elm);
+        return true;
+    }
+    const iframe = jodit.createInside.element('iframe');
+    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(iframe, {
+        src,
+        sandbox: '',
+        frameborder: '0',
+        width: (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'width'),
+        height: (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'height')
+    });
+    jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.replace(elm, iframe, undefined, false, true);
+    return true;
+}
+
+
 /***/ }),
 
 /***/ 39188:
@@ -27233,20 +27333,28 @@ const TABLE_CONTAINER_TAGS = new Set([
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   allowAttributes: function() { return /* reexport safe */ _allow_attributes__WEBPACK_IMPORTED_MODULE_0__.allowAttributes; },
-/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_1__.fillEmptyParagraph; },
-/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_2__.removeEmptyTextNode; },
-/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_3__.removeInvTextNodes; },
-/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags__WEBPACK_IMPORTED_MODULE_4__.replaceOldTags; },
-/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes__WEBPACK_IMPORTED_MODULE_5__.sanitizeAttributes; },
-/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node__WEBPACK_IMPORTED_MODULE_6__.tryRemoveNode; }
+/* harmony export */   convertUnsafeEmbeds: function() { return /* reexport safe */ _convert_unsafe_embeds__WEBPACK_IMPORTED_MODULE_1__.convertUnsafeEmbeds; },
+/* harmony export */   fillEmptyParagraph: function() { return /* reexport safe */ _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_2__.fillEmptyParagraph; },
+/* harmony export */   removeEmptyTextNode: function() { return /* reexport safe */ _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_3__.removeEmptyTextNode; },
+/* harmony export */   removeInvTextNodes: function() { return /* reexport safe */ _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_4__.removeInvTextNodes; },
+/* harmony export */   replaceOldTags: function() { return /* reexport safe */ _replace_old_tags__WEBPACK_IMPORTED_MODULE_5__.replaceOldTags; },
+/* harmony export */   safeLinksTarget: function() { return /* reexport safe */ _safe_links_target__WEBPACK_IMPORTED_MODULE_6__.safeLinksTarget; },
+/* harmony export */   sandboxIframesInContent: function() { return /* reexport safe */ _sandbox_iframes_in_content__WEBPACK_IMPORTED_MODULE_7__.sandboxIframesInContent; },
+/* harmony export */   sanitizeAttributes: function() { return /* reexport safe */ _sanitize_attributes__WEBPACK_IMPORTED_MODULE_8__.sanitizeAttributes; },
+/* harmony export */   sanitizeStyles: function() { return /* reexport safe */ _sanitize_styles__WEBPACK_IMPORTED_MODULE_9__.sanitizeStyles; },
+/* harmony export */   tryRemoveNode: function() { return /* reexport safe */ _try_remove_node__WEBPACK_IMPORTED_MODULE_10__.tryRemoveNode; }
 /* harmony export */ });
 /* harmony import */ var _allow_attributes__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(95559);
-/* harmony import */ var _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(39188);
-/* harmony import */ var _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(94561);
-/* harmony import */ var _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53514);
-/* harmony import */ var _replace_old_tags__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(35104);
-/* harmony import */ var _sanitize_attributes__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(65015);
-/* harmony import */ var _try_remove_node__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(27611);
+/* harmony import */ var _convert_unsafe_embeds__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(85085);
+/* harmony import */ var _fill_empty_paragraph__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39188);
+/* harmony import */ var _remove_empty_text_node__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(94561);
+/* harmony import */ var _remove_inv_text_nodes__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(53514);
+/* harmony import */ var _replace_old_tags__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(35104);
+/* harmony import */ var _safe_links_target__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(77041);
+/* harmony import */ var _sandbox_iframes_in_content__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(66647);
+/* harmony import */ var _sanitize_attributes__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(65015);
+/* harmony import */ var _sanitize_styles__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(60220);
+/* harmony import */ var _try_remove_node__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(27611);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -27264,6 +27372,10 @@ __webpack_require__.r(__webpack_exports__);
 
 
 
+
+
+
+
 /***/ }),
 
 /***/ 94561:
@@ -27380,6 +27492,90 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 77041:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   safeLinksTarget: function() { return /* binding */ safeLinksTarget; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Automatically add `rel="noopener noreferrer"` to links with `target="_blank"`
+ * @private
+ */ function safeLinksTarget(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.safeLinksTarget || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'A') {
+        return hadEffect;
+    }
+    const elm = nodeElm;
+    if ((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'target') !== '_blank') {
+        return hadEffect;
+    }
+    const rel = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel') || '';
+    const parts = rel.split(/\s+/).filter(Boolean);
+    let changed = false;
+    if (!parts.includes('noopener')) {
+        parts.push('noopener');
+        changed = true;
+    }
+    if (!parts.includes('noreferrer')) {
+        parts.push('noreferrer');
+        changed = true;
+    }
+    if (changed) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'rel', parts.join(' '));
+        return true;
+    }
+    return hadEffect;
+}
+
+
+/***/ }),
+
+/***/ 66647:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sandboxIframesInContent: function() { return /* binding */ sandboxIframesInContent; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Add `sandbox=""` attribute to all `<iframe>` elements in the editor content
+ * @private
+ */ function sandboxIframesInContent(jodit, nodeElm, hadEffect) {
+    if (!jodit.o.cleanHTML.sandboxIframesInContent || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) || nodeElm.nodeName !== 'IFRAME') {
+        return hadEffect;
+    }
+    const elm = nodeElm;
+    if (!elm.hasAttribute('sandbox')) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'sandbox', '');
+        return true;
+    }
+    return hadEffect;
+}
+
+
 /***/ }),
 
 /***/ 65015:
@@ -27402,9 +27598,15 @@ __webpack_require__.r(__webpack_exports__);
 /**
  * @private
  */ function sanitizeAttributes(jodit, nodeElm, hadEffect) {
-    if (jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm) && (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
-        safeJavaScriptLink: jodit.options.cleanHTML.safeJavaScriptLink,
-        removeOnError: jodit.options.cleanHTML.removeOnError
+    if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    const opts = jodit.options.cleanHTML;
+    if ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_1__.sanitizeHTMLElement)(nodeElm, {
+        safeJavaScriptLink: opts.safeJavaScriptLink,
+        removeOnError: opts.removeOnError,
+        removeEventAttributes: opts.removeEventAttributes,
+        safeLinksTarget: opts.safeLinksTarget
     })) {
         return true;
     }
@@ -27412,6 +27614,84 @@ __webpack_require__.r(__webpack_exports__);
 }
 
 
+/***/ }),
+
+/***/ 60220:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   sanitizeStyles: function() { return /* binding */ sanitizeStyles; }
+/* harmony export */ });
+/* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ 
+
+/**
+ * Filter CSS properties in style attributes based on allowedStyles whitelist
+ * @private
+ */ function sanitizeStyles(jodit, nodeElm, hadEffect) {
+    const allowedStyles = jodit.o.cleanHTML.allowedStyles;
+    if (!allowedStyles || !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(nodeElm)) {
+        return hadEffect;
+    }
+    const elm = nodeElm;
+    const style = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style');
+    if (!style) {
+        return hadEffect;
+    }
+    const tagName = nodeElm.nodeName.toLowerCase();
+    const allowed = getAllowedPropsForTag(tagName, allowedStyles);
+    if (!allowed) {
+        return hadEffect;
+    }
+    const filtered = filterStyleProperties(style, allowed);
+    if (filtered !== style) {
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'style', filtered || null);
+        return true;
+    }
+    return hadEffect;
+}
+function getAllowedPropsForTag(tagName, allowedStyles) {
+    const tagSpecific = allowedStyles[tagName];
+    const global = allowedStyles['*'];
+    if (!tagSpecific && !global) {
+        return null;
+    }
+    const set = new Set();
+    if (global) {
+        for (const prop of global){
+            set.add(prop.toLowerCase());
+        }
+    }
+    if (tagSpecific) {
+        for (const prop of tagSpecific){
+            set.add(prop.toLowerCase());
+        }
+    }
+    return set;
+}
+function filterStyleProperties(style, allowed) {
+    return style.split(';').map((s)=>s.trim()).filter((s)=>{
+        if (!s) {
+            return false;
+        }
+        const colonIdx = s.indexOf(':');
+        if (colonIdx === -1) {
+            return false;
+        }
+        const prop = s.substring(0, colonIdx).trim().toLowerCase();
+        return allowed.has(prop);
+    }).join('; ').replace(/;\s*$/, '');
+}
+
+
 /***/ }),
 
 /***/ 27611:
@@ -28864,7 +29144,7 @@ jodit_core_global__WEBPACK_IMPORTED_MODULE_4__.pluginSystem.add('dragAndDropElem
                     'src'
                 ];
                 fragment = this.j.createInside.element(tagName);
-                fragment.setAttribute(field, (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(this.draggable, 'data-src') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(this.draggable, 'src') || '');
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(fragment, field, (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(this.draggable, 'data-src') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(this.draggable, 'src') || '');
                 if (tagName === 'a') {
                     fragment.textContent = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(fragment, field) || '';
                 }
@@ -29484,7 +29764,8 @@ function brBefore(start) {
 /* harmony export */   insertParagraph: function() { return /* binding */ insertParagraph; }
 /* harmony export */ });
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(60898);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(60898);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -29493,6 +29774,7 @@ function brBefore(start) {
  * @module plugins/enter
  */ 
 
+
 /**
  * Insert default paragraph
  * @private
@@ -29502,11 +29784,11 @@ function brBefore(start) {
         p.appendChild(br);
     }
     if (style && style.cssText) {
-        p.setAttribute('style', style.cssText);
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(p, 'style', style.cssText);
     }
     jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.after(fake, p);
     jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.before(isBR ? p : br, fake);
-    (0,jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_1__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
+    (0,jodit_core_helpers_utils_scroll_into_view__WEBPACK_IMPORTED_MODULE_2__.scrollIntoViewIfNeeded)(p, editor.editor, editor.ed);
     return p;
 }
 
@@ -29696,8 +29978,9 @@ function brBefore(start) {
 /* unused harmony export file */
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
 /* harmony import */ var jodit_core_global__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(28077);
-/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(5266);
-/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(15753);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(7909);
+/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(5266);
+/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(15753);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -29710,7 +29993,8 @@ function brBefore(start) {
 
 
 
-jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
+
+jodit_config__WEBPACK_IMPORTED_MODULE_3__.Config.prototype.controls.file = {
     popup: (editor, current, close)=>{
         const insert = (url, title = '')=>{
             editor.s.insertNode(editor.createInside.fromHTML(`<a href="${url}" title="${title}">${title || url}</a>`));
@@ -29719,7 +30003,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
         if (current && (jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') || jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor))) {
             sourceAnchor = jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isTag(current, 'a') ? current : jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.closest(current, 'a', editor.editor);
         }
-        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_3__.FileSelectorWidget)(editor, {
+        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_4__.FileSelectorWidget)(editor, {
             filebrowser: (data)=>{
                 data.files && data.files.forEach((file)=>insert(data.baseurl + file));
                 close();
@@ -29727,8 +30011,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.file = {
             upload: true,
             url: (url, text)=>{
                 if (sourceAnchor) {
-                    sourceAnchor.setAttribute('href', url);
-                    sourceAnchor.setAttribute('title', text);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'href', url);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(sourceAnchor, 'title', text);
                 } else {
                     insert(url, text);
                 }
@@ -30604,8 +30888,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         if (opt.iframeCSSLinks) {
             opt.iframeCSSLinks.forEach((href)=>{
                 const link = doc.createElement('link');
-                link.setAttribute('rel', 'stylesheet');
-                link.setAttribute('href', href);
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'rel', 'stylesheet');
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(link, 'href', href);
                 doc.head && doc.head.appendChild(link);
             });
         }
@@ -30622,11 +30906,13 @@ jodit_config__WEBPACK_IMPORTED_MODULE_0__.Config.prototype.iframeSandbox = null;
         iframe.style.display = 'block';
         iframe.src = 'about:blank';
         iframe.className = 'jodit-wysiwyg_iframe';
-        iframe.setAttribute('allowtransparency', 'true');
-        iframe.setAttribute('tabindex', opt.tabIndex.toString());
-        iframe.setAttribute('frameborder', '0');
+        (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(iframe, {
+            allowtransparency: 'true',
+            tabindex: opt.tabIndex.toString(),
+            frameborder: '0'
+        });
         if (opt.iframeSandbox != null) {
-            iframe.setAttribute('sandbox', opt.iframeSandbox);
+            (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_2__.attr)(iframe, 'sandbox', opt.iframeSandbox);
         }
         editor.workplace.appendChild(iframe);
         editor.iframe = iframe;
@@ -32339,6 +32625,10 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_1__.__
         }
         (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'href', imageLink);
         (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'target', imageLinkOpenInNewTab ? '_blank' : null);
+        if (!imageLinkOpenInNewTab) {
+            const relParts = ((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel') || '').split(/\s+/).filter((p)=>p && p !== 'noopener' && p !== 'noreferrer');
+            (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(link, 'rel', relParts.length ? relParts.join(' ') : null);
+        }
     } else {
         if (link && link.parentNode) {
             link.parentNode.replaceChild(image, link);
@@ -32449,11 +32739,12 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_1__.__
 /* harmony import */ var jodit_core_dom__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(27795);
 /* harmony import */ var jodit_core_global__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(28077);
 /* harmony import */ var jodit_core_helpers__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(65946);
-/* harmony import */ var jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(29434);
-/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(5266);
-/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(15753);
-/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(64831);
-/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(_image_svg__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(29434);
+/* harmony import */ var jodit_config__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(5266);
+/* harmony import */ var jodit_modules_widget__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(15753);
+/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(64831);
+/* harmony import */ var _image_svg__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(_image_svg__WEBPACK_IMPORTED_MODULE_8__);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -32470,15 +32761,16 @@ UIImagePositionTab = (0,_swc_helpers_ts_decorate__WEBPACK_IMPORTED_MODULE_1__.__
 
 
 
-jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_4__.Icon.set('image', (_image_svg__WEBPACK_IMPORTED_MODULE_7___default()));
-jodit_config__WEBPACK_IMPORTED_MODULE_5__.Config.prototype.controls.image = {
+
+jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_5__.Icon.set('image', (_image_svg__WEBPACK_IMPORTED_MODULE_8___default()));
+jodit_config__WEBPACK_IMPORTED_MODULE_6__.Config.prototype.controls.image = {
     popup: (editor, current, close)=>{
         let sourceImage = null;
         if (current && !jodit_core_dom__WEBPACK_IMPORTED_MODULE_1__.Dom.isText(current) && jodit_core_dom__WEBPACK_IMPORTED_MODULE_1__.Dom.isHTMLElement(current) && (jodit_core_dom__WEBPACK_IMPORTED_MODULE_1__.Dom.isTag(current, 'img') || (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_3__.$$)('img', current).length)) {
             sourceImage = jodit_core_dom__WEBPACK_IMPORTED_MODULE_1__.Dom.isTag(current, 'img') ? current : (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_3__.$$)('img', current)[0];
         }
         editor.s.save();
-        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_6__.FileSelectorWidget)(editor, {
+        return (0,jodit_modules_widget__WEBPACK_IMPORTED_MODULE_7__.FileSelectorWidget)(editor, {
             filebrowser: (data)=>{
                 editor.s.restore();
                 data.files && data.files.forEach((file)=>editor.s.insertImage(data.baseurl + file, null, editor.o.imageDefaultWidth));
@@ -32491,8 +32783,8 @@ jodit_config__WEBPACK_IMPORTED_MODULE_5__.Config.prototype.controls.image = {
                         url = '//' + url;
                     }
                     const image = sourceImage || editor.createInside.element('img');
-                    image.setAttribute('src', url);
-                    image.setAttribute('alt', text);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_4__.attr)(image, 'src', url);
+                    (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_4__.attr)(image, 'alt', text);
                     if (!sourceImage) {
                         yield editor.s.insertImage(image, null, editor.o.imageDefaultWidth);
                     }
@@ -34507,7 +34799,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
         }
         if (jodit.s.isCollapsed()) {
             const a = jodit.createInside.element('a');
-            a.setAttribute('href', html);
+            (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(a, 'href', html);
             a.textContent = html;
             jodit.e.fire('applyLink', jodit, a, null);
             return a;
@@ -34567,7 +34859,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                 target_checkbox.checked = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(link, 'target') === '_blank';
             }
             if (noFollowCheckbox && nofollow_checkbox) {
-                nofollow_checkbox.checked = (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(link, 'rel') === 'nofollow';
+                nofollow_checkbox.checked = ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(link, 'rel') || '').split(/\s+/).includes('nofollow');
             }
             insert.textContent = i18n('Update');
         } else {
@@ -34633,7 +34925,14 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                     (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(a, 'target', target_checkbox.checked ? '_blank' : null);
                 }
                 if (noFollowCheckbox && nofollow_checkbox) {
-                    (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(a, 'rel', nofollow_checkbox.checked ? 'nofollow' : null);
+                    const relParts = ((0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(a, 'rel') || '').split(/\s+/).filter(Boolean);
+                    const hasNofollow = relParts.includes('nofollow');
+                    if (nofollow_checkbox.checked && !hasNofollow) {
+                        relParts.push('nofollow');
+                    } else if (!nofollow_checkbox.checked && hasNofollow) {
+                        relParts.splice(relParts.indexOf('nofollow'), 1);
+                    }
+                    (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_5__.attr)(a, 'rel', relParts.length ? relParts.join(' ') : null);
                 }
                 jodit.e.fire('applyLink', jodit, a, form);
             });
@@ -37275,8 +37574,8 @@ const keyBInd = '__jodit-resizer_binded';
             this.j.e.off(element, 'mousedown.select touchstart.select').on(element, 'mousedown.select touchstart.select', ()=>{
                 this.j.s.select(element);
             }).off(element, 'changesize').on(element, 'changesize', ()=>{
-                iframe.setAttribute('width', element.offsetWidth + 'px');
-                iframe.setAttribute('height', element.offsetHeight + 'px');
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(iframe, 'width', element.offsetWidth + 'px');
+                (0,jodit_core_helpers__WEBPACK_IMPORTED_MODULE_6__.attr)(iframe, 'height', element.offsetHeight + 'px');
             });
         }
         this.j.e.on(element, 'dragstart', this.hide);
@@ -39346,8 +39645,9 @@ class AceEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORT
 /* harmony export */ });
 /* harmony import */ var _swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(25045);
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(23211);
-/* harmony import */ var jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(80991);
-/* harmony import */ var jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(94193);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(7909);
+/* harmony import */ var jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(80991);
+/* harmony import */ var jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(94193);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -39358,7 +39658,8 @@ class AceEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORT
 
 
 
-class TextAreaEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_3__.SourceEditor {
+
+class TextAreaEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_IMPORTED_MODULE_4__.SourceEditor {
     init(editor) {
         this.instance = editor.c.element('textarea', {
             class: 'jodit-source__mirror',
@@ -39366,7 +39667,7 @@ class TextAreaEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_I
         });
         this.container.appendChild(this.instance);
         editor.e.on(this.instance, 'mousedown keydown touchstart input', editor.async.debounce(this.toWYSIWYG, editor.defaultTimeout)).on('setMinHeight.source', (minHeightD)=>{
-            (0,jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_2__.css)(this.instance, 'minHeight', minHeightD);
+            (0,jodit_core_helpers_utils_css__WEBPACK_IMPORTED_MODULE_3__.css)(this.instance, 'minHeight', minHeightD);
         }).on(this.instance, 'change keydown mousedown touchstart input', this.autosize).on('afterSetMode.source', this.autosize).on(this.instance, 'mousedown focus', (e)=>{
             editor.e.fire(e.type, e);
         });
@@ -39410,14 +39711,10 @@ class TextAreaEditor extends jodit_plugins_source_editor_sourceEditor__WEBPACK_I
         this.instance.blur();
     }
     setPlaceHolder(title) {
-        this.instance.setAttribute('placeholder', title);
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(this.instance, 'placeholder', title);
     }
     setReadOnly(isReadOnly) {
-        if (isReadOnly) {
-            this.instance.setAttribute('readonly', 'true');
-        } else {
-            this.instance.removeAttribute('readonly');
-        }
+        (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_2__.attr)(this.instance, 'readonly', isReadOnly ? 'true' : null);
     }
     selectAll() {
         this.instance.select();