jodit 4.12.41 → 4.12.44

package/es5/plugins/debug/debug.css

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/plugins/debug/debug.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/plugins/debug/debug.min.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/plugins/speech-recognize/speech-recognize.css

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/plugins/speech-recognize/speech-recognize.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/plugins/speech-recognize/speech-recognize.min.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/polyfills.fat.min.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/polyfills.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/es5/polyfills.min.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.41
+ * Version: v4.12.44
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */

package/esm/config.d.ts

@@ -21,6 +21,7 @@ import type { ISourceEditor } from "./types/index";
 import type { ISpeechRecognizeConstructor } from "./plugins/speech-recognize/interface";
 import type { Attributes } from "./types/index";
 import type { Controls } from "./types/index";
+import type { IAsyncStorageOptions } from "./types/index";
 import type { IExtraPlugin } from "./types/index";
 import type { IUIButtonState } from "./types/index";
 import type { IViewOptions } from "./types/index";
@@ -345,6 +346,27 @@ declare class Config implements IViewOptions {
      * if set true, then the current mode is saved in a cookie, and is restored after a reload of the page
      */
     saveModeInStorage: boolean;
+    /**
+     * Configure the provider that backs {@link IViewBased.asyncStorage}.
+     *
+     * By default the editor's `asyncStorage` uses persistent `IndexedDB` (with an
+     * in-memory fallback when it is unavailable). Set `defaultProvider` to override it:
+     * - `'local'` — persist in `localStorage`;
+     * - `'memory'` — keep everything in memory (nothing survives a reload);
+     * - a custom {@link IAsyncStorage} implementation — plug in your own backend.
+     *
+     * ```javascript
+     * Jodit.make('#editor', {
+     *    asyncStorage: { defaultProvider: 'local' }
+     * });
+     *
+     * // or a fully custom backend
+     * Jodit.make('#editor', {
+     *    asyncStorage: { defaultProvider: myAsyncStorage }
+     * });
+     * ```
+     */
+    asyncStorage: IAsyncStorageOptions;
     /**
      * Class name that can be appended to the editable area
      *

package/esm/config.js

@@ -363,6 +363,27 @@ class Config {
          * if set true, then the current mode is saved in a cookie, and is restored after a reload of the page
          */
         this.saveModeInStorage = false;
+        /**
+         * Configure the provider that backs {@link IViewBased.asyncStorage}.
+         *
+         * By default the editor's `asyncStorage` uses persistent `IndexedDB` (with an
+         * in-memory fallback when it is unavailable). Set `defaultProvider` to override it:
+         * - `'local'` — persist in `localStorage`;
+         * - `'memory'` — keep everything in memory (nothing survives a reload);
+         * - a custom {@link IAsyncStorage} implementation — plug in your own backend.
+         *
+         * ```javascript
+         * Jodit.make('#editor', {
+         *    asyncStorage: { defaultProvider: 'local' }
+         * });
+         *
+         * // or a fully custom backend
+         * Jodit.make('#editor', {
+         *    asyncStorage: { defaultProvider: myAsyncStorage }
+         * });
+         * ```
+         */
+        this.asyncStorage = {};
         /**
          * Class name that can be appended to the editable area
          *

package/esm/core/constants.js

@@ -3,7 +3,7 @@
  * Released under MIT see LICENSE.txt in the project root for license information.
  * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
  */
-export const APP_VERSION = "4.12.41";
+export const APP_VERSION = "4.12.44";
 // prettier-ignore
 export const ES = "es2020";
 export const IS_ES_MODERN = true;

package/esm/core/storage/async-storage.d.ts

@@ -6,7 +6,7 @@
 /**
  * @module storage
  */
-import type { IAsyncStorage, IStorage, StorageValueType } from "../../types/index";
+import type { IAsyncStorage, IAsyncStorageOptions, IStorage, StorageValueType } from "../../types/index";
 import { type WebStorageStrategy } from "./engines/local-storage-provider";
 export declare class AsyncStorage<T = StorageValueType> implements IAsyncStorage<T> {
     private provider;
@@ -18,5 +18,5 @@ export declare class AsyncStorage<T = StorageValueType> implements IAsyncStorage
     exists(key: string): Promise<boolean>;
     clear(): Promise<this>;
     close(): Promise<void>;
-    static makeStorage(persistentOrStrategy?: boolean | WebStorageStrategy | 'memoryStorage' | 'indexedDB', suffix?: string): IAsyncStorage;
+    static makeStorage(persistentOrStrategy?: boolean | WebStorageStrategy | 'memoryStorage' | 'indexedDB', suffix?: string, options?: IAsyncStorageOptions): IAsyncStorage;
 }

package/esm/core/storage/async-storage.js

@@ -45,9 +45,27 @@ export class AsyncStorage {
             await provider.close();
         }
     }
-    static makeStorage(persistentOrStrategy = false, suffix) {
+    static makeStorage(persistentOrStrategy = false, suffix, options) {
         let provider = undefined;
         let storage = null;
+        // An explicit `defaultProvider` overrides the strategy-based selection
+        // below and decides which provider backs the storage.
+        const defaultProvider = options === null || options === void 0 ? void 0 : options.defaultProvider;
+        if (defaultProvider != null) {
+            if (defaultProvider === 'local') {
+                provider = canUsePersistentStorage('localStorage')
+                    ? new LocalStorageProvider(StorageKey + (suffix || ''))
+                    : new MemoryStorageProvider();
+            }
+            else if (defaultProvider === 'memory') {
+                provider = new MemoryStorageProvider();
+            }
+            else {
+                // A custom IAsyncStorage implementation, used as-is.
+                provider = defaultProvider;
+            }
+            return new AsyncStorage(Promise.resolve(provider), suffix);
+        }
         if (persistentOrStrategy === 'localStorage' ||
             persistentOrStrategy === 'sessionStorage') {
             if (canUsePersistentStorage(persistentOrStrategy)) {

package/esm/core/storage/engines/local-storage-provider.js

@@ -47,7 +47,12 @@ export class LocalStorageProvider {
     }
     delete(key) {
         try {
-            this.storage.removeItem(this.rootKey);
+            const buffer = this.storage.getItem(this.rootKey);
+            if (buffer) {
+                const json = JSON.parse(buffer);
+                delete json[key];
+                this.storage.setItem(this.rootKey, JSON.stringify(json));
+            }
         }
         catch (_a) { }
         return this;

package/esm/core/view/view.js

@@ -105,7 +105,7 @@ let View = View_1 = class View extends Component {
      * Container for persistent set/get value
      */
     get asyncStorage() {
-        return AsyncStorage.makeStorage(true, this.id);
+        return AsyncStorage.makeStorage(true, this.id, this.o.asyncStorage);
     }
     /**
      * Short alias for `create`

package/esm/plugins/clean-html/helpers/index.d.ts

@@ -7,6 +7,7 @@
  * @module plugins/clean-html
  */
 export * from "./get-hash";
+export * from "./is-allowed-media-embed";
 export * from "./remove-format/remove-format-for-collapsed-selection";
 export * from "./remove-format/remove-format-for-selection";
 export * from "./visitor/visit-node-walker";

package/esm/plugins/clean-html/helpers/index.js

@@ -7,6 +7,7 @@
  * @module plugins/clean-html
  */
 export * from "./get-hash.js";
+export * from "./is-allowed-media-embed.js";
 export * from "./remove-format/remove-format-for-collapsed-selection.js";
 export * from "./remove-format/remove-format-for-selection.js";
 export * from "./visitor/visit-node-walker.js";

package/esm/plugins/clean-html/helpers/is-allowed-media-embed.d.ts

@@ -0,0 +1,15 @@
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */
+/**
+ * Whether an `<iframe>` `src` points at a recognized YouTube/Vimeo video
+ * player. Such iframes are inserted intentionally through the Video button, so
+ * clean-html must not strip them (`denyTags` includes `iframe` by default) or
+ * neutralize them with an empty `sandbox=""` (#1381). Arbitrary/bare iframes
+ * are still removed.
+ *
+ * @private
+ */
+export declare function isAllowedMediaEmbed(src: string): boolean;

package/esm/plugins/clean-html/helpers/is-allowed-media-embed.js

@@ -0,0 +1,28 @@
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */
+/**
+ * @module plugins/clean-html
+ */
+// The embed URLs produced by the built-in Video button (see
+// `convertMediaUrlToVideoEmbed`): `//www.youtube.com/embed/<id>` and
+// `//player.vimeo.com/video/<id>`. `youtube-nocookie.com` is the privacy
+// variant YouTube offers for the same `/embed/` player. The `/embed/` and
+// `/video/` path prefixes are required so a bare provider link
+// (`youtube.com/@somebody`) is not treated as a player.
+const YOUTUBE_EMBED = /^(https?:)?\/\/(www\.|m\.|music\.)?youtube(-nocookie)?\.com\/embed\//i;
+const VIMEO_EMBED = /^(https?:)?\/\/player\.vimeo\.com\/video\//i;
+/**
+ * Whether an `<iframe>` `src` points at a recognized YouTube/Vimeo video
+ * player. Such iframes are inserted intentionally through the Video button, so
+ * clean-html must not strip them (`denyTags` includes `iframe` by default) or
+ * neutralize them with an empty `sandbox=""` (#1381). Arbitrary/bare iframes
+ * are still removed.
+ *
+ * @private
+ */
+export function isAllowedMediaEmbed(src) {
+    return YOUTUBE_EMBED.test(src) || VIMEO_EMBED.test(src);
+}

package/esm/plugins/clean-html/helpers/visitor/filters/sandbox-iframes-in-content.js

@@ -5,6 +5,7 @@
  */
 import { Dom } from "../../../../../core/dom/dom.js";
 import { attr } from "../../../../../core/helpers/utils/attr.js";
+import { isAllowedMediaEmbed } from "../../is-allowed-media-embed.js";
 /**
  * Add `sandbox=""` attribute to all `<iframe>` elements in the editor content
  * @private
@@ -16,6 +17,12 @@ export function sandboxIframesInContent(jodit, nodeElm, hadEffect) {
         return hadEffect;
     }
     const elm = nodeElm;
+    // A trusted YouTube/Vimeo player (inserted via the Video button) must not
+    // get an empty `sandbox=""` — that blocks scripts and stops playback. It
+    // is served in its own third-party origin, so leave it as-is (#1381).
+    if (isAllowedMediaEmbed(attr(elm, 'src') || '')) {
+        return hadEffect;
+    }
     if (!elm.hasAttribute('sandbox')) {
         attr(elm, 'sandbox', '');
         return true;

package/esm/plugins/clean-html/helpers/visitor/filters/try-remove-node.js

@@ -6,6 +6,8 @@
 import { IS_INLINE } from "../../../../../core/constants.js";
 import { Dom } from "../../../../../core/dom/dom.js";
 import { trimInv } from "../../../../../core/helpers/string/trim.js";
+import { attr } from "../../../../../core/helpers/utils/attr.js";
+import { isAllowedMediaEmbed } from "../../is-allowed-media-embed.js";
 /**
  * @private
  */
@@ -24,7 +26,13 @@ function isRemovableNode(jodit, node, current, allow, deny) {
         if (allow && !allow[node.nodeName]) {
             return true;
         }
-        if (!allow && deny && deny[node.nodeName]) {
+        // A YouTube/Vimeo player inserted through the Video button is trusted
+        // editor content, so keep it even though `iframe` is denied by default
+        // — otherwise the embed is stripped ~300ms after insertion (#1381).
+        // Arbitrary/bare iframes stay denied.
+        const isTrustedEmbed = node.nodeName === 'IFRAME' &&
+            isAllowedMediaEmbed(attr(node, 'src') || '');
+        if (!allow && deny && deny[node.nodeName] && !isTrustedEmbed) {
             return true;
         }
     }

package/esm/types/storage.d.ts

@@ -22,3 +22,18 @@ export interface IAsyncStorage<T = StorageValueType> {
     clear(): Promise<this>;
     close(): Promise<void>;
 }
+/**
+ * Which provider should back an {@link IAsyncStorage} created by
+ * `AsyncStorage.makeStorage`:
+ * - `'local'` — use `localStorage` (falls back to memory if it is blocked);
+ * - `'memory'` — use an in-memory store (nothing survives a page reload);
+ * - a custom {@link IAsyncStorage} implementation — use it as-is.
+ */
+export type AsyncStorageDefaultProvider = 'local' | 'memory' | IAsyncStorage;
+export interface IAsyncStorageOptions {
+    /**
+     * Overrides the provider that backs the storage. When omitted the storage
+     * behaves as before — persistent `IndexedDB` with an in-memory fallback.
+     */
+    defaultProvider?: AsyncStorageDefaultProvider;
+}

package/esm/types/view.d.ts

@@ -9,7 +9,7 @@
 import type { Buttons, ButtonsGroup, ButtonsOption, Controls, IControlType, IProgressBar, IToolbarCollection } from "./toolbar";
 import type { CanUndef, IComponent, IContainer, IDictionary, Nullable } from "./types";
 import type { Attributes, ICreate } from "./create";
-import type { IAsyncStorage, IStorage } from "./storage";
+import type { IAsyncStorage, IAsyncStorageOptions, IStorage } from "./storage";
 import type { IUIButtonState } from "./ui";
 import type { IEventEmitter } from "./events";
 import type { IPluginButton } from "./plugin";
@@ -40,6 +40,13 @@ interface IViewOptions extends ILanguageOptions, IToolbarOptions {
      * Use cache for heavy methods
      */
     cache?: boolean;
+    /**
+     * Configure the provider that backs {@link IViewBased.asyncStorage}.
+     * By default it uses persistent `IndexedDB` (with an in-memory fallback);
+     * set `defaultProvider` to `'local'`, `'memory'` or a custom
+     * {@link IAsyncStorage} implementation to override it.
+     */
+    asyncStorage?: IAsyncStorageOptions;
     getIcon?: (name: string, clearName: string) => CanUndef<string>;
     headerButtons?: string | Array<IControlType | string | ButtonsGroup>;
     readonly basePath?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "jodit",
-	"version": "4.12.41",
+	"version": "4.12.44",
 	"description": "Jodit is an awesome and useful wysiwyg editor with filebrowser",
 	"main": "esm/index.js",
 	"types": "types/index.d.ts",

package/types/config.d.ts

@@ -21,6 +21,7 @@ import type { ISourceEditor } from "./types/index";
 import type { ISpeechRecognizeConstructor } from "./plugins/speech-recognize/interface";
 import type { Attributes } from "./types/index";
 import type { Controls } from "./types/index";
+import type { IAsyncStorageOptions } from "./types/index";
 import type { IExtraPlugin } from "./types/index";
 import type { IUIButtonState } from "./types/index";
 import type { IViewOptions } from "./types/index";
@@ -345,6 +346,27 @@ declare class Config implements IViewOptions {
      * if set true, then the current mode is saved in a cookie, and is restored after a reload of the page
      */
     saveModeInStorage: boolean;
+    /**
+     * Configure the provider that backs {@link IViewBased.asyncStorage}.
+     *
+     * By default the editor's `asyncStorage` uses persistent `IndexedDB` (with an
+     * in-memory fallback when it is unavailable). Set `defaultProvider` to override it:
+     * - `'local'` — persist in `localStorage`;
+     * - `'memory'` — keep everything in memory (nothing survives a reload);
+     * - a custom {@link IAsyncStorage} implementation — plug in your own backend.
+     *
+     * ```javascript
+     * Jodit.make('#editor', {
+     *    asyncStorage: { defaultProvider: 'local' }
+     * });
+     *
+     * // or a fully custom backend
+     * Jodit.make('#editor', {
+     *    asyncStorage: { defaultProvider: myAsyncStorage }
+     * });
+     * ```
+     */
+    asyncStorage: IAsyncStorageOptions;
     /**
      * Class name that can be appended to the editable area
      *

package/types/core/storage/async-storage.d.ts

@@ -6,7 +6,7 @@
 /**
  * @module storage
  */
-import type { IAsyncStorage, IStorage, StorageValueType } from "../../types/index";
+import type { IAsyncStorage, IAsyncStorageOptions, IStorage, StorageValueType } from "../../types/index";
 import { type WebStorageStrategy } from "./engines/local-storage-provider";
 export declare class AsyncStorage<T = StorageValueType> implements IAsyncStorage<T> {
     private provider;
@@ -18,5 +18,5 @@ export declare class AsyncStorage<T = StorageValueType> implements IAsyncStorage
     exists(key: string): Promise<boolean>;
     clear(): Promise<this>;
     close(): Promise<void>;
-    static makeStorage(persistentOrStrategy?: boolean | WebStorageStrategy | 'memoryStorage' | 'indexedDB', suffix?: string): IAsyncStorage;
+    static makeStorage(persistentOrStrategy?: boolean | WebStorageStrategy | 'memoryStorage' | 'indexedDB', suffix?: string, options?: IAsyncStorageOptions): IAsyncStorage;
 }

package/types/plugins/clean-html/helpers/index.d.ts

@@ -7,6 +7,7 @@
  * @module plugins/clean-html
  */
 export * from "./get-hash";
+export * from "./is-allowed-media-embed";
 export * from "./remove-format/remove-format-for-collapsed-selection";
 export * from "./remove-format/remove-format-for-selection";
 export * from "./visitor/visit-node-walker";

package/types/plugins/clean-html/helpers/is-allowed-media-embed.d.ts

@@ -0,0 +1,15 @@
+/*!
+ * Jodit Editor (https://xdsoft.net/jodit/)
+ * Released under MIT see LICENSE.txt in the project root for license information.
+ * Copyright (c) 2013-2026 Valerii Chupurnov. All rights reserved. https://xdsoft.net
+ */
+/**
+ * Whether an `<iframe>` `src` points at a recognized YouTube/Vimeo video
+ * player. Such iframes are inserted intentionally through the Video button, so
+ * clean-html must not strip them (`denyTags` includes `iframe` by default) or
+ * neutralize them with an empty `sandbox=""` (#1381). Arbitrary/bare iframes
+ * are still removed.
+ *
+ * @private
+ */
+export declare function isAllowedMediaEmbed(src: string): boolean;

package/types/types/storage.d.ts

@@ -22,3 +22,18 @@ export interface IAsyncStorage<T = StorageValueType> {
     clear(): Promise<this>;
     close(): Promise<void>;
 }
+/**
+ * Which provider should back an {@link IAsyncStorage} created by
+ * `AsyncStorage.makeStorage`:
+ * - `'local'` — use `localStorage` (falls back to memory if it is blocked);
+ * - `'memory'` — use an in-memory store (nothing survives a page reload);
+ * - a custom {@link IAsyncStorage} implementation — use it as-is.
+ */
+export type AsyncStorageDefaultProvider = 'local' | 'memory' | IAsyncStorage;
+export interface IAsyncStorageOptions {
+    /**
+     * Overrides the provider that backs the storage. When omitted the storage
+     * behaves as before — persistent `IndexedDB` with an in-memory fallback.
+     */
+    defaultProvider?: AsyncStorageDefaultProvider;
+}

package/types/types/view.d.ts

@@ -9,7 +9,7 @@
 import type { Buttons, ButtonsGroup, ButtonsOption, Controls, IControlType, IProgressBar, IToolbarCollection } from "./toolbar";
 import type { CanUndef, IComponent, IContainer, IDictionary, Nullable } from "./types";
 import type { Attributes, ICreate } from "./create";
-import type { IAsyncStorage, IStorage } from "./storage";
+import type { IAsyncStorage, IAsyncStorageOptions, IStorage } from "./storage";
 import type { IUIButtonState } from "./ui";
 import type { IEventEmitter } from "./events";
 import type { IPluginButton } from "./plugin";
@@ -40,6 +40,13 @@ interface IViewOptions extends ILanguageOptions, IToolbarOptions {
      * Use cache for heavy methods
      */
     cache?: boolean;
+    /**
+     * Configure the provider that backs {@link IViewBased.asyncStorage}.
+     * By default it uses persistent `IndexedDB` (with an in-memory fallback);
+     * set `defaultProvider` to `'local'`, `'memory'` or a custom
+     * {@link IAsyncStorage} implementation to override it.
+     */
+    asyncStorage?: IAsyncStorageOptions;
     getIcon?: (name: string, clearName: string) => CanUndef<string>;
     headerButtons?: string | Array<IControlType | string | ButtonsGroup>;
     readonly basePath?: string;