Give us feedback

Stable version 1.1.2 (Compatible with OutSystems 11)

Uploaded on 11 Jul (5 days ago) by

4.2

(12 ratings)

Details

CKEditor is a WYSIWYG rich text editor which enables writing content directly inside of web pages or online applications.

CKEditor is an open source WYSIWYG rich text (HTML) editor that can be embedded in reactive web and mobile apps. It brings to the web common editing features found on desktop editing applications like Microsoft Word and OpenOffice.

Main features

Paste from Word, Excel and Google Docs. Excellent tables support with columns resizing, selecting rows and columns. Toolbar customization using automated code created in the page available here.

This component is a reactive version of the web component https://www.outsystems.com/forge/component-overview/97/ckeditor

Release notes (1.1.2)

CKEditor version 4 has detected security vulnerabilities in the 4.24.1., so the component has been updated.

The CKEditor.Reactive was updated to mitigate these vulnerabilities, to assure that your applications that use this component is protected, these are the mitigation steps that need to be assured:

Issues:

Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

Mitigation (needs to be assured in development time):
Don't allow config: fullPage: true
Don't allow config: allowedContent = true or adding CDATA elements in Advanced Content Filter

Cross-site scripting (XSS) vulnerability in AJAX sample

Mitigation
The CKEditor.Reactive component doesn't have the affected file: samples/old/ajax.html
Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

Mitigation
The CKEditor.Reactive component doesn't have the affected file:
samples/old/**/*.html
plugins/[plugin name]/samples/**/*.html

License (1.1.2)

BSD-3 license (https://opensource.org/licenses/BSD-3-Clause)

Reviews (5)

22 Jan

in version 1.0.10

This component is not suitable for pages that take a certain amount of time to load. On first use, if the page loading time exceeds one second, the component breaks and is unusable.

Additionally, it uses unsecured public APIs for attachment management.

For your safety, prefer another component.

2023-12-27

in version 1.0.10

CkEditor is widely used by developers because it simplifies the process of editing and managing website content. Its intuitive interface and powerful features make it a go-to choice for many. So, if you are looking for a text editor that's easy to use, customization, and packed with useful features, CkEditor is definitely worth checking out.

2023-12-09

in version 1.0.10

Best tool to store and generate the html elements. The best example is you can create dynamic email templates and certificates templates to auto use in your project.

Team