#1469: Fixed: Trying to get data from a nested editable inside a freshly pasted widget throws an error.
#2235: Fixed: An Image in a table cell has an empty URL field when edited from the context menu opened by right-click when the Table Selection plugin is in use.
#3098: Fixed: Unit pickers for table cell width and height in the Table Tools plugin have a different width.
#2748: Enhanced error messages thrown when creating an editor on a non-existent element or when trying to instantiate the second editor on the same element. Thanks to Byran Zaugg!
#2403: Fixed: Styling inline editor initialized inside a table with the Table Selection plugin is causing style leaks.
#2514: Fixed: Pasting table data into inline editor initialized inside a table with the Table Selection plugin inserts pasted content into the wrapping table.
Fixed XSS vulnerability in the HTML parser reported by maxarr.
Issue summary: It was possible to execute XSS inside CKEditor after persuading the victim to: (i) switch CKEditor to source mode, then (ii) paste a specially crafted HTML code, prepared by the attacker, into the opened CKEditor source area, and (iii) switch back to WYSIWYG mode.
An upgrade is highly recommended!
New Features:
#2062: Added the emoji dropdown that allows the user to choose the emoji from the toolbar and search for them using keywords.
#2154: The Link plugin now supports phone number links.
#1815: The Auto Link plugin supports typing link completion.
#2478: Link can be inserted using the Ctrl/Cmd + K keystroke.
#651: Text pasted using the Paste from Word plugin preserves indentation in paragraphs.
#706: Added a different cursor style when selecting cells for the Table Selection plugin.
#2072: The UI Button plugin supports custom aria-haspopup property values. The Menu Buttonaria-haspopupvalue is now menu, the Panel Button and Rich Comboaria-haspopup value is now listbox.
#1176: The Balloon Panel can now be attached to a selection instead of an element.
#2202: Added the contextmenu_contentsCss configuration option to allow adding custom CSS to the Context Menu.
#1703: Introduced the Mentions plugin providing smart completion feature for custom text matches based on user input starting with a chosen marker character.
#1746: Introduced the Emoji plugin providing completion feature for emoji ideograms.
#1724: Added an option to the getClientRect() function allowing to retrieve an absolute bounding rectangle of the element, i.e. a position relative to the upper-left corner of the topmost viewport.
#1498 : Added a new getClientRects() method to CKEDITOR.dom.range. It returns a list of rectangles for each selected element.
Language dictionary update: Added support for the Uzbek Latin language.
Languages no longer supported as additional languages: Manx - Isle of Man (gv_GB) and Interlingua (ia_XR).
Extended and improved language dictionaries: Georgian and Swedish. Also added the missing word "Ensure" to the American, British and Canada English language.
#141 Fixed: SCAYT throws "Uncaught Error: Error in RangyWrappedRange module: createRange(): Parameter must be a Window object or DOM node".
#153 [Chrome] Fixed: Correcting a word in the widget in SCAYT moves focus to another editable.
#155 [IE8] Fixed: SCAYT throws an error and does not work.
Fixed: After some text is dragged and dropped, the markup is not refreshed for grammar problems in SCAYT.
Fixed: Request to FastCGI fails when the user tries to replace a word with non-English characters with a proper suggestion in WSC.
[Firefox] Fixed: Ctrl+Z removes focus in SCAYT.
Grammar support for default languages was improved.
New application source URL was added in SCAYT.
Removed green marks and legend related to grammar-supported languages in the Languages tab of SCAYT. Grammar is now supported for almost all the anguages in the list for an additional fee.
Fixed: JavaScript error in the console: "Cannot read property 'split' of undefined" in SCAYT and WSC.
[IE10] Fixed: Markup is not set for a specific case in SCAYT.
Fixed: Accessibility issue: No alt attribute for the logo image in the About tab of SCAYT.