jodit 4.12.41 → 4.12.44

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -378,6 +378,26 @@ var ConfigPrototype = {};
         /**
 	 * if set true, then the current mode is saved in a cookie, and is restored after a reload of the page
 	 */ (0,_swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_2__._)(this, "saveModeInStorage", false);
+        /**
+	 * Configure the provider that backs {@link IViewBased.asyncStorage}.
+	 *
+	 * By default the editor's `asyncStorage` uses persistent `IndexedDB` (with an
+	 * in-memory fallback when it is unavailable). Set `defaultProvider` to override it:
+	 * - `'local'` — persist in `localStorage`;
+	 * - `'memory'` — keep everything in memory (nothing survives a reload);
+	 * - a custom {@link IAsyncStorage} implementation — plug in your own backend.
+	 *
+	 * ```javascript
+	 * Jodit.make('#editor', {
+	 *    asyncStorage: { defaultProvider: 'local' }
+	 * });
+	 *
+	 * // or a fully custom backend
+	 * Jodit.make('#editor', {
+	 *    asyncStorage: { defaultProvider: myAsyncStorage }
+	 * });
+	 * ```
+	 */ (0,_swc_helpers_define_property__WEBPACK_IMPORTED_MODULE_2__._)(this, "asyncStorage", {});
         /**
 	 * Class name that can be appended to the editable area
 	 *
@@ -2087,7 +2107,7 @@ __webpack_require__.r(__webpack_exports__);
  * @packageDocumentation
  * @module constants
  */ 
-var APP_VERSION = "4.12.41";
+var APP_VERSION = "4.12.44";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -14997,9 +15017,23 @@ var AsyncStorage = /*#__PURE__*/ function() {
         {
             key: "makeStorage",
             value: function makeStorage() {
-                var persistentOrStrategy = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : false, suffix = arguments.length > 1 ? arguments[1] : void 0;
+                var persistentOrStrategy = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : false, suffix = arguments.length > 1 ? arguments[1] : void 0, options = arguments.length > 2 ? arguments[2] : void 0;
                 var provider = undefined;
                 var storage = null;
+                // An explicit `defaultProvider` overrides the strategy-based selection
+                // below and decides which provider backs the storage.
+                var defaultProvider = options === null || options === void 0 ? void 0 : options.defaultProvider;
+                if (defaultProvider != null) {
+                    if (defaultProvider === 'local') {
+                        provider = (0,_engines_local_storage_provider__WEBPACK_IMPORTED_MODULE_7__.canUsePersistentStorage)('localStorage') ? new _engines_local_storage_provider__WEBPACK_IMPORTED_MODULE_7__.LocalStorageProvider(_storage__WEBPACK_IMPORTED_MODULE_9__.StorageKey + (suffix || '')) : new _engines_memory_storage_provider__WEBPACK_IMPORTED_MODULE_8__.MemoryStorageProvider();
+                    } else if (defaultProvider === 'memory') {
+                        provider = new _engines_memory_storage_provider__WEBPACK_IMPORTED_MODULE_8__.MemoryStorageProvider();
+                    } else {
+                        // A custom IAsyncStorage implementation, used as-is.
+                        provider = defaultProvider;
+                    }
+                    return new AsyncStorage(Promise.resolve(provider), suffix);
+                }
                 if (persistentOrStrategy === 'localStorage' || persistentOrStrategy === 'sessionStorage') {
                     if ((0,_engines_local_storage_provider__WEBPACK_IMPORTED_MODULE_7__.canUsePersistentStorage)(persistentOrStrategy)) {
                         provider = new _engines_local_storage_provider__WEBPACK_IMPORTED_MODULE_7__.LocalStorageProvider(_storage__WEBPACK_IMPORTED_MODULE_9__.StorageKey + (suffix || ''), persistentOrStrategy);
@@ -15728,7 +15762,12 @@ function clearUseIndexedDBCache() {
             key: "delete",
             value: function _delete(key) {
                 try {
-                    this.storage.removeItem(this.rootKey);
+                    var buffer = this.storage.getItem(this.rootKey);
+                    if (buffer) {
+                        var json = JSON.parse(buffer);
+                        delete json[key];
+                        this.storage.setItem(this.rootKey, JSON.stringify(json));
+                    }
                 } catch (unused) {}
                 return this;
             }
@@ -20269,7 +20308,7 @@ var View = /*#__PURE__*/ function(Component) {
             get: /**
 	 * Container for persistent set/get value
 	 */ function get() {
-                return jodit_core_storage_async_storage__WEBPACK_IMPORTED_MODULE_21__.AsyncStorage.makeStorage(true, this.id);
+                return jodit_core_storage_async_storage__WEBPACK_IMPORTED_MODULE_21__.AsyncStorage.makeStorage(true, this.id, this.o.asyncStorage);
             }
         },
         {
@@ -33454,6 +33493,43 @@ jodit_core_ui_icon__WEBPACK_IMPORTED_MODULE_0__.Icon.set('eraser', (_eraser_svg_
 
 
 
+
+/***/ }),
+
+/***/ 28665:
+/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   isAllowedMediaEmbed: function() { return /* binding */ isAllowedMediaEmbed; }
+/* harmony export */ });
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */ /**
+ * @module plugins/clean-html
+ */ // The embed URLs produced by the built-in Video button (see
+// `convertMediaUrlToVideoEmbed`): `//www.youtube.com/embed/<id>` and
+// `//player.vimeo.com/video/<id>`. `youtube-nocookie.com` is the privacy
+// variant YouTube offers for the same `/embed/` player. The `/embed/` and
+// `/video/` path prefixes are required so a bare provider link
+// (`youtube.com/@somebody`) is not treated as a player.
+var YOUTUBE_EMBED = /^(https?:)?\/\/(www\.|m\.|music\.)?youtube(-nocookie)?\.com\/embed\//i;
+var VIMEO_EMBED = /^(https?:)?\/\/player\.vimeo\.com\/video\//i;
+/**
+ * Whether an `<iframe>` `src` points at a recognized YouTube/Vimeo video
+ * player. Such iframes are inserted intentionally through the Video button, so
+ * clean-html must not strip them (`denyTags` includes `iframe` by default) or
+ * neutralize them with an empty `sandbox=""` (#1381). Arbitrary/bare iframes
+ * are still removed.
+ *
+ * @private
+ */ function isAllowedMediaEmbed(src) {
+    return YOUTUBE_EMBED.test(src) || VIMEO_EMBED.test(src);
+}
+
+
 /***/ }),
 
 /***/ 37431:
@@ -33944,6 +34020,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */ });
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
 /* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(7909);
+/* harmony import */ var _is_allowed_media_embed__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(28665);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -33952,6 +34029,7 @@ __webpack_require__.r(__webpack_exports__);
  * @module plugins/clean-html
  */ 
 
+
 /**
  * Add `sandbox=""` attribute to all `<iframe>` elements in the editor content
  * @private
@@ -33960,6 +34038,12 @@ __webpack_require__.r(__webpack_exports__);
         return hadEffect;
     }
     var elm = nodeElm;
+    // A trusted YouTube/Vimeo player (inserted via the Video button) must not
+    // get an empty `sandbox=""` — that blocks scripts and stops playback. It
+    // is served in its own third-party origin, so leave it as-is (#1381).
+    if ((0,_is_allowed_media_embed__WEBPACK_IMPORTED_MODULE_2__.isAllowedMediaEmbed)((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'src') || '')) {
+        return hadEffect;
+    }
     if (!elm.hasAttribute('sandbox')) {
         (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_1__.attr)(elm, 'sandbox', '');
         return true;
@@ -34132,6 +34216,8 @@ function filterStyleProperties(style, allowed) {
 /* harmony import */ var jodit_core_constants__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(81937);
 /* harmony import */ var jodit_core_dom_dom__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(23211);
 /* harmony import */ var jodit_core_helpers_string_trim__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(4040);
+/* harmony import */ var jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(7909);
+/* harmony import */ var _is_allowed_media_embed__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(28665);
 /*!
  * Jodit Editor (https://xdsoft.net/jodit/)
  * Released under MIT see LICENSE.txt in the project root for license information.
@@ -34141,6 +34227,8 @@ function filterStyleProperties(style, allowed) {
  */ 
 
 
+
+
 /**
  * @private
  */ function tryRemoveNode(jodit, nodeElm, hadEffect, allowTags, denyTags, currentSelectionNode) {
@@ -34157,7 +34245,12 @@ function filterStyleProperties(style, allowed) {
         if (allow && !allow[node.nodeName]) {
             return true;
         }
-        if (!allow && deny && deny[node.nodeName]) {
+        // A YouTube/Vimeo player inserted through the Video button is trusted
+        // editor content, so keep it even though `iframe` is denied by default
+        // — otherwise the embed is stripped ~300ms after insertion (#1381).
+        // Arbitrary/bare iframes stay denied.
+        var isTrustedEmbed = node.nodeName === 'IFRAME' && (0,_is_allowed_media_embed__WEBPACK_IMPORTED_MODULE_4__.isAllowedMediaEmbed)((0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_3__.attr)(node, 'src') || '');
+        if (!allow && deny && deny[node.nodeName] && !isTrustedEmbed) {
             return true;
         }
     }

package/es5/jodit.min.css

@@ -1,14 +1,14 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
 	/*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */