Version 1.4.5 released
Version 1.4.5
Version 1.4.5 has been released. Thanks to everyone who contributed!
Important: This version fixes a potential XSS exploit where if someone loaded malicious BBCode into the editor (i.e. editing a malicious users BBCode) it could cause an XSS exploit. This does not affect the XHTML plugin as all XHTML, regardless of source, should be filtered server side unless it’s from a trusted user. See the XHTML plugin warning for more information.
Other than that this version is mostly just bug fixes, there are a few new translations as well as the new indent/outdent commands.
Also there is a bug in jQuery that causes IE 11 not to work. This is fixed in jQuery version 1.10.2 and above.
Full 1.4.5 changelog:
- Added command shortcuts to tooltips.
– Thanks to @brunoais
- Added Portuguese translation.
– Thanks to @brunoais
- Added list indent and outdent commands.
– Thanks to @brunoais
- Added Ukrainian translation.
–hanks to @aqrln for translating
- Fixed bug with BBCode source editor creating links with [img] tags selected.
– Thanks to @liamdawe for reporting.
- Fixed issue with insert() and FF.
– Thanks to @martec for reporting.
- Fixed in IE8 and below with XHTML font size attribute converstion.
- Fixed typo in German translation.
– Thanks to Ulf for reporting.
- Removed build.sh as grunt now does everything build.sh could.
- Added Italian translation.
– Thanks to Tropico for translating.
- Fixed bug when insert empty node.
– Thanks to @spuds for reporting.
- Fixed FF bug with dropdowns not opening via shortcuts.
– Thanks to @echteinfachtv for reporting.
- Improved inserting so only scrolls if the end of the inserted HTML isn't in view.
- Added zh-TW translation.
– Thanks to @gan068 for translating.
- Updated Polish translation.
– Thanks to @gnysek for updating.
- Fix possible XSS if editing loading BBCode that someone else has written.
– Thanks to for Sergiu reporting.
- Fixed default font size.
– Thanks to @jetand for fixing.
- Added Japanese translation.
– Thanks to @PyYoshi for translating.
- Fixed bug with XHTML plugin stripping iframes.
– Thanks to @tim-se for reporting.
- Fixed bug with IE11 newline handling.