CKEditor 4.14 stable version has been released , including updates to add new features, fix bugs and improved API.
One of the most noteworthy is that this version supports content from LibreOffice copy and paste directly into the editor CKEditor, and retain the original structure and format, including other advanced image settings, font style, heading level, nested lists, complex forms. In addition, this version also conducted a security fix for HTML data processor and WebSpellChecker Dialog plug-ins, official strongly recommend upgrading to this version.
Copy and paste LibreOffice documents
CKEditor 4 to copy and paste content from Word, Excel and Google Docs has a strong support, this new version of " Paste from LibreOffice " plug the LibreOffice also added in, the user can copy the content from CKEditor editor to LibreOffice Writer, Editor It will retain the original structure and format and style used for the adjustment in the editor, to generate a semantic clean HTML code.
Documentation: https://ckeditor.com/docs/ckeditor4/latest/examples/pastefromlibreoffice.html
By default, "Standard" and "complete" version default editor provide this functionality.
Fix security issues
CKEditor 4.14 Fixed HTML data processor in a XSS vulnerability. When the attacker to perform the following operations, the attacker will be able to conduct XSS attacks in CKEditor in:
- CKEditor switched to "Code Mode"
- The attackers prepared specially crafted HTML code into the window 1
- Switch back to "WYSIWYG"
此外，4.14 还修复了 CKEditor 4 “标准”和“完整”版本预置中，其包含的第三方 WebSpellChecker Dialog 插件中的 XSS 漏洞。
这是对 CKEditor 集成 React 和 Angular 等类似框架的补充，集成 Vue.js 意味着，开发者可以通过<ckeditor />标签以 Vue.js 组件的形式使用 CKEditor 4 ，而作为 Vue.js 的原生组件，开发者可以更快地将其应用到网站上。
有关 API 变更和改进，以及其他功能增强的内容请查看发布公告。