jodit 4.12.27 → 4.12.29

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.27
+ * Version: v4.12.29
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -2074,7 +2074,7 @@ __webpack_require__.r(__webpack_exports__);
  * @packageDocumentation
  * @module constants
  */ 
-var APP_VERSION = "4.12.27";
+var APP_VERSION = "4.12.29";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -4690,12 +4690,12 @@ var LazyWalker = /*#__PURE__*/ function(Eventify) {
             key: "__removeStoreFromSubject",
             value: function __removeStoreFromSubject(subject) {
                 if (subject[this.__key] !== undefined) {
-                    Object.defineProperty(subject, this.__key, {
-                        enumerable: false,
-                        configurable: true,
-                        writable: true,
-                        value: undefined
-                    });
+                    // Fully remove the namespaces store key instead of just setting it to
+                    // `undefined`. On long-lived subjects — e.g. `window` in an SPA where
+                    // editors are repeatedly created and destroyed — leftover `undefined`
+                    // keys would otherwise pile up on the object. The property is defined
+                    // as `configurable`, so `delete` removes it cleanly.
+                    delete subject[this.__key];
                 }
             }
         },
@@ -6986,6 +6986,34 @@ function normalizeCSS(s) {
  * @module helpers/html
  */ 
 
+var HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';
+/**
+ * Integration points where HTML is legitimately allowed inside MathML/SVG foreign content.
+ */ var HTML_INTEGRATION_POINTS = new Set([
+    'foreignobject',
+    'annotation-xml',
+    'desc',
+    'title'
+]);
+/**
+ * True for an HTML element the parser placed inside MathML/SVG outside an integration point - smuggled
+ * HTML (e.g. `mglyph` / `style` under `<math>`) that a reparse can hoist into a live node. Legitimate
+ * MathML/SVG children and HTML below an integration point are kept.
+ */ function isSmuggledForeignHtml(elm) {
+    if (elm.namespaceURI !== HTML_NAMESPACE || elm.closest('math,svg') == null) {
+        return false;
+    }
+    for(var parent = elm.parentElement; parent; parent = parent.parentElement){
+        var name = parent.nodeName.toLowerCase();
+        if (name === 'math' || name === 'svg') {
+            break;
+        }
+        if (HTML_INTEGRATION_POINTS.has(name)) {
+            return false;
+        }
+    }
+    return true;
+}
 /**
  * Removes dangerous constructs from HTML
  */ function safeHTML(box, options) {
@@ -6993,6 +7021,14 @@ function normalizeCSS(s) {
     if (!jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isElement(box) && !jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.isFragment(box)) {
         return;
     }
+    // Drop HTML smuggled into MathML/SVG before the walk: a reparse would otherwise hoist its hidden
+    // markup into a live node.
+    var foreign = box.querySelectorAll('math *, svg *');
+    for(var i = 0; i < foreign.length; i++){
+        if (foreign[i].isConnected && isSmuggledForeignHtml(foreign[i])) {
+            jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__.Dom.safeRemove(foreign[i]);
+        }
+    }
     var removeEvents = (_options_removeEventAttributes = options.removeEventAttributes) !== null && _options_removeEventAttributes !== void 0 ? _options_removeEventAttributes : options.removeOnError;
     // Single synchronous traversal of the subtree. Besides removing event
     // handlers and `javascript:` links, `sanitizeHTMLElement` neutralises

package/es5/jodit.min.css

@@ -1,14 +1,14 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.27
+ * Version: v4.12.29
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
 	/*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.27
+ * Version: v4.12.29
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */