jodit 4.12.36 → 4.12.38

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.36
+ * Version: v4.12.38
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -300,6 +300,19 @@ var ConfigPrototype = {};
 	 * editor.value = '<p>start</p>';
 	 * ```
 	 */ (0,_swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_2__._)(this, "shadowRoot", null);
+        /**
+	 * CSP nonce applied to every `<style>`, `<script>` and `<link>` element
+	 * Jodit injects at runtime (plugin styles, CDN scripts for ACE/beautify,
+	 * downloaded stylesheets). Set it to the same nonce your server puts in the
+	 * `Content-Security-Policy` header so a strict `style-src`/`script-src`
+	 * policy does not block the editor.
+	 *
+	 * ```js
+	 * Jodit.make('#editor', {
+	 * 	nonce: 'r4nd0m'
+	 * });
+	 * ```
+	 */ (0,_swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_2__._)(this, "nonce", '');
         /**
 	 * Base CSS `z-index` for the editor UI (toolbar, popups, dialogs).
 	 * Set to a higher value when other page elements overlap the editor.
@@ -2074,7 +2087,7 @@ __webpack_require__.r(__webpack_exports__);
  * @packageDocumentation
  * @module constants
  */ 
-var APP_VERSION = "4.12.36";
+var APP_VERSION = "4.12.38";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -5674,6 +5687,10 @@ var boxes = new WeakMap();
         var box = c.element(tag, {
             className: "jodit jodit-".concat((0,jodit_core_helpers_string_kebab_case__WEBPACK_IMPORTED_MODULE_3__.kebabCase)(name), "-container jodit-box")
         });
+        // Let a strict CSP accept the injected <style>/<script> box
+        if (view.o.nonce && (tag === 'style' || tag === 'script')) {
+            box.setAttribute('nonce', view.o.nonce);
+        }
         box.classList.add("jodit_theme_".concat(view.o.theme || 'default'));
         body.appendChild(box);
         data[key] = box;
@@ -8599,6 +8616,9 @@ var cacheLoaders = function cacheLoaders(loader) {
             async: true,
             src: (0,_complete_url__WEBPACK_IMPORTED_MODULE_1__.completeUrl)(url)
         });
+        if (jodit.o.nonce) {
+            script.setAttribute('nonce', jodit.o.nonce);
+        }
         jodit.e.one(script, 'error', reject).one(script, 'load', resolve);
         jodit.od.body.appendChild(script);
     });
@@ -8614,6 +8634,9 @@ var cacheLoaders = function cacheLoaders(loader) {
         link.rel = 'stylesheet';
         link.media = 'all';
         link.crossOrigin = 'anonymous';
+        if (jodit.o.nonce) {
+            link.setAttribute('nonce', jodit.o.nonce);
+        }
         var callback = function callback() {
             return resolve(link);
         };
@@ -42266,6 +42289,7 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.link = {
     followOnDblClick: false,
     processVideoLink: true,
     processPastedLink: true,
+    deriveUrlFromText: false,
     noFollowCheckbox: true,
     openInNewTabCheckbox: true,
     openInNewTabCheckboxDefaultChecked: false,
@@ -42505,6 +42529,9 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
                     insert.textContent = i18n('Update');
                 } else {
                     jodit_core_dom__WEBPACK_IMPORTED_MODULE_8__.Dom.hide(unlink);
+                    if (jodit.o.link.deriveUrlFromText && url_input && !isImageContent && !url_input.value.trim()) {
+                        url_input.value = guessUrlFromText(content_input.value);
+                    }
                     if (openInNewTabCheckbox && target_checkbox) {
                         target_checkbox.checked = openInNewTabCheckboxDefaultChecked;
                     }
@@ -42634,6 +42661,29 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.controls.link = {
     jodit_core_decorators__WEBPACK_IMPORTED_MODULE_7__.autobind
 ], link.prototype, "__onClickReadOnlyLink", null);
 jodit_core_global__WEBPACK_IMPORTED_MODULE_9__.pluginSystem.add('link', link);
+/**
+ * Guess a usable `href` from the selected text for the link dialog.
+ * Returns an empty string when the text is not a plausible URL/email,
+ * so plain text (e.g. "click here") is left untouched.
+ */ function guessUrlFromText(text) {
+    var value = text.trim();
+    if (!value || /\s/.test(value)) {
+        return '';
+    }
+    // already an explicit scheme, an anchor or a relative path
+    if (/^(https?:|mailto:|tel:|ftp:|#|\/|\.{1,2}\/)/i.test(value)) {
+        return value;
+    }
+    // email address -> mailto:
+    if (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value)) {
+        return "mailto:".concat(value);
+    }
+    // bare domain like example.com or www.example.com/path -> https://
+    if (/^[a-z0-9-]+(\.[a-z0-9-]+)+(\/\S*)?$/i.test(value)) {
+        return "https://".concat(value);
+    }
+    return '';
+}
 function writeClasses(modeClassName, className_input, className_select, a) {
     if (modeClassName && (className_input !== null && className_input !== void 0 ? className_input : className_select)) {
         if (modeClassName === 'input') {
@@ -48391,6 +48441,11 @@ var AceEditor = /*#__PURE__*/ function(SourceEditor) {
                         _this.instance.setOption('rtlText', true);
                         _this.instance.setOption('rtl', true);
                     }
+                    // Forward every native ACE option the user provided (theme,
+                    // mode, fontSize, tabSize, …). Without this only the handful of
+                    // keys explicitly wired below were applied and extras such as
+                    // `fontSize` were silently ignored. See #1285
+                    _this.instance.setOptions(editor.o.sourceEditorNativeOptions);
                     _this.instance.setTheme(editor.o.sourceEditorNativeOptions.theme);
                     _this.instance.renderer.setShowGutter(editor.o.sourceEditorNativeOptions.showGutter);
                     _this.instance.getSession().setMode(editor.o.sourceEditorNativeOptions.mode);

package/es5/jodit.min.css

@@ -1,14 +1,14 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.36
+ * Version: v4.12.38
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
 	/*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.36
+ * Version: v4.12.38
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */