jodit 4.12.5 → 4.12.7

package/es5/jodit.js

@@ -1,7 +1,7 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.5
+ * Version: v4.12.7
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
@@ -2066,7 +2066,7 @@ __webpack_require__.r(__webpack_exports__);
  * @packageDocumentation
  * @module constants
  */ 
-var APP_VERSION = "4.12.5";
+var APP_VERSION = "4.12.7";
 // prettier-ignore
 var ES = "es5";
 var IS_ES_MODERN = false;
@@ -27542,8 +27542,22 @@ var Table = /*#__PURE__*/ function(ViewComponent) {
                                 return jodit_core_dom__WEBPACK_IMPORTED_MODULE_12__.Dom.isTag(elm, 'tr');
                             }, table);
                             if (nextRow) {
-                                if (box[rowIndex + 1][nextCell]) {
-                                    nextRow.insertBefore(cell, box[rowIndex + 1][nextCell]);
+                                // `box[rowIndex + 1][nextCell]` is the cell that
+                                // logically follows the moved cell in the next row, but
+                                // it may physically belong to an earlier `<tr>` (when it
+                                // spans down from a row above). Inserting before such a
+                                // cell throws `NotFoundError`, so look for the first
+                                // following cell that is actually a child of `nextRow`.
+                                var referenceCell = null;
+                                for(var nextColumn = nextCell; nextColumn < box[rowIndex + 1].length; nextColumn += 1){
+                                    var candidate = box[rowIndex + 1][nextColumn];
+                                    if (candidate && candidate.parentNode === nextRow) {
+                                        referenceCell = candidate;
+                                        break;
+                                    }
+                                }
+                                if (referenceCell) {
+                                    nextRow.insertBefore(cell, referenceCell);
                                 } else {
                                     nextRow.appendChild(cell);
                                 }
@@ -39763,13 +39777,16 @@ jodit_config__WEBPACK_IMPORTED_MODULE_2__.Config.prototype.popup = {
  */ /**
  * @module plugins/inline-popup
  */ 
+var isSafeHref = function isSafeHref(href) {
+    return /^(https?:|mailto:|tel:)/i.test(href.trim()) && !/^(javascript:|data:|vbscript:)/i.test(href.trim());
+};
 /* harmony default export */ __webpack_exports__["default"] = ([
     {
         name: 'eye',
         tooltip: 'Open link',
         exec: function exec(editor, current) {
             var href = (0,jodit_core_helpers_utils_attr__WEBPACK_IMPORTED_MODULE_0__.attr)(current, 'href');
-            if (current && href) {
+            if (current && href && isSafeHref(href)) {
                 editor.ow.open(href);
             }
         }

package/es5/jodit.min.css

@@ -1,14 +1,14 @@
 /*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.5
+ * Version: v4.12.7
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */
 	/*!
  * jodit - Jodit is an awesome and useful wysiwyg editor with filebrowser
  * Author: Chupurnov <chupurnov@gmail.com> (https://xdsoft.net/jodit/)
- * Version: v4.12.5
+ * Version: v4.12.7
  * Url: https://xdsoft.net/jodit/
  * License(s): MIT
  */