Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated ckeditor to v4.21.0 #640

Merged
merged 1 commit into from
Apr 18, 2023

Conversation

sgordeychuk
Copy link
Contributor

The main reason of this upgrade was the fix of CVE-2022-24728 ckeditor vulnerability (which worries many people and vulnerability testing tools), but ckeditor builder doesn't allow to just pick version 4.18, so I've upgraded to the latest.

I've tested it in one of ours django cms projects, although I'm not sure how I can share the test results. Please let me know if any additional steps should be taken to test the upgrade.

I've also ran tests using python setup.py test for dj32_cms311 and dj41_cms41 envs, the results are:

Ran 47 tests in 1.071s

OK (skipped=5)

@fsbraun
Copy link
Member

fsbraun commented Mar 22, 2023

@sgordeychuk Thanks a lot! We might need to get the latest moono-lisa skin patched to work with dark mode. Can you check locally if the ckeditor skin turns into dark mode if used? The editor is built by running gulp build.

@codecov
Copy link

codecov bot commented Mar 22, 2023

Codecov Report

Merging #640 (52a76aa) into master (3478dfb) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #640   +/-   ##
=======================================
  Coverage   76.18%   76.18%           
=======================================
  Files          20       20           
  Lines         932      932           
  Branches      124      124           
=======================================
  Hits          710      710           
  Misses        196      196           
  Partials       26       26           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

Copy link
Member

@fsbraun fsbraun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've tested it and see no issues.

@fsbraun fsbraun merged commit ada4cff into django-cms:master Apr 18, 2023
@sgordeychuk
Copy link
Contributor Author

thanks a lot @fsbraun ! I saw your comment but didn't have a chance to take a look at it, sorry

netbsd-srcmastr referenced this pull request in NetBSD/pkgsrc Oct 10, 2023
5.1.4 (2023-10-03)

fix: Issue 641 which lead to disappearing content after adding child plugins and cancelling the edit
Feature/issue 648 unable to unlink
fix: Remove legacy code from Django pre 1.4
fix: test suite for Django 2.2

5.1.3 (2022-06-21)

Upgrade Ckeditor to 4.21.0 via `640 https://github.com/django-cms/djangocms-text-ckeditor/pull/640`_

5.1.2 (2022-12-27)

Add suport for django CMS 4.1
Fix 468 via 637: Delay importing models.CMSPlugin in utils to allow adding an HTMLField to a custom user model.

5.1.1 (2022-06-22)

Removed inline editing toggle button from touch devices (where it is inactive anyways) and collapsed menus
Add workaround for toolbar bug in django CMS < 3.10: Reload page after change in inline editor
Fix 578: If parent plugins to not set body css class the default from CKEDITOR_SETTINGS is used

5.1.0 (2022-03-24)

Added inline editing
fix: Update skin patch to avoid @media query

5.0.1 (2022-03-24)

Generated new static bundle.

5.0.0 (2022-03-24)

Drop support for Python 3.5 and 3.6
Drop support for django 3.0
Added support for Python 3.9 and 3.10
Added support for django 3.2
Added support for django-cms 3.9 and 3.10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants