New Features:

• #1751: Introduced the Autocomplete feature that consists of the following plugins:
  • Autocomplete – Provides contextual completion feature for custom text matches based on user input.
  • Text Watcher – Checks whether an editor's text change matches the chosen criteria.
  • Text Match – Allows to search CKEDITOR.dom.range for matching text.
• #1703: Introduced the Mentions plugin providing smart completion feature for custom text matches based on user input starting with a chosen marker character.
• #1746: Introduced the Emoji plugin providing completion feature for emoji ideograms.
• #1761: The Auto Link plugin now supports email links.

Fixed Issues:

• #1458: [Edge] Fixed: After blurring the editor it takes 2 clicks to focus a widget.
• #1034: Fixed: JAWS leaves forms mode after pressing the Enter key in an inline editor instance.
• #1748: Fixed: Missing CKEDITOR.dialog.definition.onHide API documentation. Thanks to sunnyone!
• #1321: Ideographic space character (\u3000) is lost when pasting text.
• #1776: Empty caption placeholder of the Image Base plugin is not hidden when blurred.
• #1592: The Image Base plugin caption is not visible after paste.
• #620: Fixed: The config.forcePasteAsPlainText option is not respected in internal and cross-editor pasting.
• #1467: Fixed: The resizing cursor of the Table Resize plugin appearing in the middle of a merged cell.

API Changes:

• #850: Backward incompatibility: Replaced the replace dialog from the Find / Replace plugin with a tabId option in the find command.
• #1582: The CKEDITOR.editor.addCommand() method can now accept a CKEDITOR.command instance as a parameter.
• #1712: The extraPlugins, removePlugins and plugins configuration options allow whitespace.
• #1802: The extraPlugins, removePlugins and plugins configuration options allow passing plugin names as an array.
• #1724: Added an option to the getClientRect() function allowing to retrieve an absolute bounding rectangle of the element, i.e. a position relative to the upper-left corner of the topmost viewport.
• #1498 : Added a new getClientRects() method to CKEDITOR.dom.range. It returns a list of rectangles for each selected element.
• #1993: Added the CKEDITOR.tools.throttle() function.

Other Changes:

• Updated SCAYT (Spell Check As You Type) and WebSpellChecker (WSC) plugins:
  • Language dictionary update: Added support for the Uzbek Latin language.
  • Languages no longer supported as additional languages: Manx - Isle of Man (gv_GB) and Interlingua (ia_XR).
  • Extended and improved language dictionaries: Georgian and Swedish. Also added the missing word "Ensure" to the American, British and Canada English language.
  • #141 Fixed: SCAYT throws "Uncaught Error: Error in RangyWrappedRange module: createRange(): Parameter must be a Window object or DOM node".
  • #153 [Chrome] Fixed: Correcting a word in the widget in SCAYT moves focus to another editable.
  • #155 [IE8] Fixed: SCAYT throws an error and does not work.
  • #156 [IE10] Fixed: SCAYT does not seem to work.
  • Fixed: After some text is dragged and dropped, the markup is not refreshed for grammar problems in SCAYT.
  • Fixed: Request to FastCGI fails when the user tries to replace a word with non-English characters with a proper suggestion in WSC.
  • [Firefox] Fixed: Ctrl+Z removes focus in SCAYT.
  • Grammar support for default languages was improved.
  • New application source URL was added in SCAYT.
  • Removed green marks and legend related to grammar-supported languages in the Languages tab of SCAYT. Grammar is now supported for almost all the anguages in the list for an additional fee.
  • Fixed: JavaScript error in the console: "Cannot read property 'split' of undefined" in SCAYT and WSC.
  • [IE10] Fixed: Markup is not set for a specific case in SCAYT.
  • Fixed: Accessibility issue: No alt attribute for the logo image in the About tab of SCAYT.

Security Updates:

• Fixed XSS vulnerability in the Enhanced Image (image2) plugin reported by Kyaw Min Thein.

  Issue summary: It was possible to execute XSS inside CKEditor using the <img> tag and specially crafted HTML. Please note that the default presets (Basic/Standard/Full) do not include this plugin, so you are only at risk if you made a custom build and enabled this plugin.

Fixed Issues:

• #1835: Fixed: Integration between CKFinder and File Browser plugin does not work.

New Features:

• #932: Introduced Easy Image feature for inserting images that are automatically rescaled, optimized, responsive and delivered through a blazing-fast CDN. Three new plugins were added to support it:
  • Easy Image,
  • Cloud Services
  • Image Base
• #1338: Keystroke labels are displayed for function keys (like F7, F8).
• #643: The File Browser plugin can now upload files using XHR requests. This allows for setting custom HTTP headers using the config.fileTools_requestHeaders configuration option.
• #1365: The File Browser plugin uses XHR requests by default.
• #1399: Added the possibility to set CKEDITOR.config.startupFocus as start or end to specify where the editor focus should be after the initialization.
• #1441: The Magic Line plugin line element can now be identified by the data-cke-magic-line="1" attribute.

Fixed Issues:

• #595: Fixed: Pasting does not work on mobile devices.
• #869: Fixed: Empty selection clears cached clipboard data in the editor.
• #1419: Fixed: The Widget Selection plugin selects the editor content with the Alt+A key combination on Windows.
• #1274: Fixed: Balloon Toolbar does not match a single selected image using the contextDefinition.cssSelectormatcher.
• #1232: Fixed: Balloon Toolbar buttons should be registered as focusable elements.
• #1342: Fixed: Balloon Toolbar should be re-positioned after the change event.
• #1426: [IE8-9] Fixed: Missing Balloon Toolbar background in the Kama skin. Thanks to Christian Elmer!
• #1470: Fixed: Balloon Toolbar is not visible after drag and drop of a widget it is attached to.
• #1048: Fixed: Balloon Panel is not positioned properly when a margin is added to its non-static parent.
• #889: Fixed: Unclear error message for width and height fields in the Image and Enhanced Image plugins.
• #859: Fixed: Cannot edit a link after a double-click on the text in the link.
• #1013: Fixed: Paste from Word does not work correctly with the config.forcePasteAsPlainText option.
• #1356: Fixed: Border parse function does not allow spaces in the color value.
• #1010: Fixed: The CSS border shorthand property was incorrectly expanded ignoring the border-color style.
• #1535: Fixed: Widget mouseover border contrast is insufficient.
• #1516: Fixed: Fake selection allows removing content in read-only mode using the Backspace and Delete keys.
• #1570: Fixed: Fake selection allows cutting content in read-only mode using the Ctrl/Cmd + X keys.
• #1363: Fixed: Paste notification is unclear and it might confuse users.

API Changes:

• #1346: Balloon Toolbar context manager API is now available in the pluginDefinition.init method of the requiringplugin.
• #1530: Added the possibility to use custom icons for buttons.

Other Changes:

• Updated SCAYT (Spell Check As You Type) and WebSpellChecker plugins:
  • SCAYT scayt_minWordLength configuration option now defaults to 3 instead of 4.
  • SCAYT default number of suggested words in the context menu changed to 3.
  • #90: Fixed: Selection is lost on link creation if SCAYT highlights the word.
  • Fixed: SCAYT crashes when the browser localStorage is disabled.
  • [IE11] Fixed: Unable to get property type of undefined or null reference error in the browser console when SCAYT is disabled/enabled.
  • #46: Fixed: Editing is blocked when remote spell checker server is offline.
  • Fixed: User Dictionary cannot be created in WSC due to You already have the dictionary error.
  • Fixed: Words with apostrophe ' on the replacement make the WSC dialog inaccessible.
  • Fixed: SCAYT/WSC causes the Uncaught TypeError error in the browser console.
• #1337: Updated the samples layout with the new CKEditor 4 logo and color scheme.
• #1591: CKBuilder and language tools are now downloaded over HTTPS. Thanks to August Detlefsen!

New Features:

• #568: Added possibility to adjust nested editables' filters using the CKEDITOR.filter.disallowedContentproperty.

Fixed Issues:

• #554: Fixed: change event not fired when typing the first character after pasting into the editor. Thanks to Daniel Miller!
• #566: Fixed: The CSS border shorthand property with zero width (border: 0px solid #000;) causes the table to have the border attribute set to 1.
• #779: Fixed: The Remove Format plugin removes elements with language definition inserted by the Languageplugin.
• #423: Fixed: The Paste from Word plugin pastes paragraphs into the editor even if CKEDITOR.config.enterModeis set to CKEDITOR.ENTER_BR.
• #719: Fixed: Image inserted using the Enhanced Image plugin can be resized when the editor is in read-only mode.
• #577: Fixed: The "Delete Columns" command provided by the Table Tools plugin throws an error when trying to delete columns.
• #867: Fixed: Typing into a selected table throws an error.
• #817: Fixed: The Save plugin does not work in Source Mode.

Other Changes:

• Updated the WebSpellChecker plugin:
  • #40: Fixed: IE10 throws an error when spell checking is started.
• #800: Added the CKEDITOR.dom.selection.isCollapsed method which is a simpler way to check if the selection is collapsed.
• #830: Added an option to define which dialog tab should be shown by default when creating CKEDITOR.dialogCommand.

New Features:

• #455: Added Advanced Content Filter integration with the Justify plugin.

Fixed Issues:

• #663: [Chrome] Fixed: Clicking the scrollbar throws an Uncaught TypeError: element.is is not a functionerror.
• #520: Fixed: Widgets cannot be properly pasted into a table cell.
• #579: Fixed: Internal cke_table-faked-selection-table class is visible in the Stylesheet Classes field of the Table Properties dialog.
• #545: [Edge] Fixed: Error thrown when pressing the Select All button in Source Mode.
• #582: Fixed: Double slash in the path to stylesheet needed by the Table Selection plugin. Thanks to Marius Dumitru Florea!
• #491: Fixed: Unnecessary dependency on the Editor Toolbar plugin inside the Notification plugin.
• #646: Fixed: Error thrown into the browser console after opening the Styles Combo plugin menu in the editor without any selection.
• #501: Fixed: Double click does not open the dialog for modifying anchors inserted via the Link plugin.
• #9780: [IE8-9] Fixed: Clicking inside an empty read-only editor throws an error.
• #16820: [IE10] Fixed: Clicking below a single horizontal rule throws an error.
• #426: Fixed: The range.cloneContents method selects the whole element when the selection starts at the beginning of that element.
• #644: Fixed: The range.extractContents method returns an incorrect result when multiple nodes are selected.
• #684: Fixed: The elementPath.contains method incorrectly excludes the last element instead of root when the fromTop parameter is set to true.

Other Changes:

• Updated the SCAYT (Spell Check As You Type) plugin:
  • #148: Fixed: SCAYT leaves underlined word after the CKEditor Replace dialog corrects it.
• #751: Added the CKEDITOR.dom.nodeList.toArray method which returns an array representation of a node list.

New Features:

• #16733: Added a new pastel color palette for the Color Button plugin and a new config.colorButton_colorsPerRow configuration option for setting the number of rows in the color selector.
• #16752: Added a new Azerbaijani localization. Thanks to the Azerbaijani language team!
• #13818: It is now possible to group Widget style definitions, so applying one style disables the other.

Fixed Issues:

• #13446: [Chrome] Fixed: It is possible to type in an unfocused inline editor.
• #14856: Fixed: Font size and font family reset each other when modified at certain positions.
• #16745: [Edge] Fixed: List items are lost when pasted from Word.
• #16682: [Edge] Fixed: A list gets pasted from Word as a set of paragraphs. Added the config.pasteFromWord_heuristicsEdgeList configuration option.
• #10373: Fixed: Context menu items can be dragged into the editor.
• #16728: [IE] Fixed: Copy Formatting breaks the editor in Quirks Mode.
• #16795: [IE] Fixed: Copy Formatting breaks the editor in Compatibility Mode.
• #16675: Fixed: Styles applied with Copy Formatting to a single table cell are applied to the whole table.
• #16753: Fixed: element.setSize sets incorrect editor dimensions if the border width is represented as a fraction of pixels.
• #16705: [Firefox] Fixed: Unable to paste images as Base64 strings when using Clipboard.
• #14869: Fixed: JavaScript error is thrown when trying to use Find in a <div>-based editor.

New Features:

• #16639: The callback parameter in the CKEDITOR.ajax.post method became optional.

Fixed Issues:

• #11064: [Blink, WebKit] Fixed: Cannot select all editor content when a widget or a non-editable element is the first or last element of the content. Also fixes this issue in the Select All plugin.
• #14755: [Blink, WebKit, IE8] Fixed: Browser hangs when a table is inserted in the place of a selected list with an empty last item.
• #16624: Fixed: Improved the Color Button plugin which will now normalize the CSS background property if it only contains a color value. This fixes missing background colors when using Paste from Word.
• #16600: [Blink, WebKit] Fixed: Error thrown occasionally by an uninitialized editable for multiple CKEditor instances on the same page.

New Features:

• #14569: Added a new, flat, default CKEditor skin called Moono-Lisa. Refreshed default colors available in the Color Button plugin (Text Color and Background Color feature).
• #14707: Added a new Copy Formatting feature to enable easy copying of styles between your document parts.
• Introduced the completely rewritten Paste from Word plugin:
  • Backward incompatibility: The config.pasteFromWordRemoveFontStyles option now defaults to false. This option will be deprecated in the future. Use Advanced Content Filter to replicate the effect of setting it to true.
  • Backward incompatibility: The config.pasteFromWordNumberedHeadingToList and config.pasteFromWordRemoveStyles options were dropped and no longer have any effect on pasted content.
  • Major improvements in preservation of list numbering, styling and indentation (nested lists with multiple levels).
  • Major improvements in document structure parsing that fix plenty of issues with distorted or missing content after paste.
• Added new translation: Occitan. Thanks to Cédric Valmary!
• #10015: Keyboard shortcuts (relevant to the operating system in use) will now be displayed in tooltips and context menus.
• #13794: The Upload Image feature now uses uploaded.width/height if set.
• #12541: Added the Upload File plugin that lets you upload a file by drag&dropping it into the editor content.
• #14449: Introduced the Balloon Panel plugin that lets you create stylish floating UI elements for the editor.
• #12077: Added support for the HTML5 download attribute in link (<a>) elements. Selecting the "Force Download" checkbox in the Link dialog will cause the linked file to be downloaded automatically. Thanks to sbusse!
• #13518: Introduced the additionalRequestParameters property for file uploads to make it possible to send additional information about the uploaded file to the server.
• #14889: Added the config.image2_altRequired option for the Enhanced Image plugin to allow making alternative text a mandatory field. Thanks to Andrey Fedoseev!

Fixed Issues:

• #9991: Fixed: Paste from Word should only normalize input data.
• #7209: Fixed: Lists with 3 levels not pasted from Word correctly.
• #14335: Fixed: Pasting a numbered list starting with a value different from "1" from Microsoft Word does not work correctly.
• #14542: Fixed: Copying a numbered list from Microsoft Word does not preserve list formatting.
• #14544: Fixed: Copying a nested list from Microsoft Word results in an empty list.
• #14660: Fixed: Pasting text from Word breaks the styling in some cases.
• #14867: [Firefox] Fixed: Text gets stripped when pasting content from Word.
• #2507: Fixed: Paste from Word does not detect pasting a part of a paragraph.
• #3336: Fixed: Extra blank row added on top of the content pasted from Word.
• #6115: Fixed: When Right-to-Left text direction is applied to a table pasted from Word, borders are missing on one side.
• #6342: Fixed: Paste from Word filters out a basic text style when it is configured to use attributes.
• #6457: [IE] Fixed: Pasting from Word is extremely slow.
• #6789: Fixed: The mso-list: ignore style is not handled properly when pasting from Word.
• #7262: Fixed: Lists in preformatted body disappear when pasting from Word.
• #7662: [Opera] Fixed: Extra empty number/bullet shown in the editor body when editing a multi-level list pasted from Word.
• #7807: Fixed: Last item in a list not converted to a <li> element after pasting from Word.
• #7950: [IE] Fixed: Content from Word pasted differently than in other browsers.
• #7982: Fixed: Multi-level lists get split into smaller ones when pasting from Word.
• #8231: [WebKit, Opera] Fixed: Paste from Word inserts empty paragraphs.
• #8266: Fixed: Paste from Word inserts a blank line at the top.
• #8341, #7646: Fixed: Faulty removal of empty <span> elements in Paste from Word content cleanup breaking content formatting.
• #8754: [Firefox] Fixed: Incorrect pasting of multiple nested lists in Paste from Word.
• #8983: Fixed: Alignment lost when pasting from Word with config.enterMode set to CKEDITOR.ENTER_BR.
• #9331: [IE] Fixed: Pasting text from Word creates a simple Caesar cipher.
• #9422: Fixed: Paste from Word leaves an unwanted color:windowtext style.
• #10011: [IE9-10] Fixed: config.pasteFromWordRemoveFontStyles is ignored under certain conditions.
• #10643: Fixed: Differences between using Ctrl+V and pasting from the Paste from Word dialog.
• #10784: Fixed: Lines missing when pasting from Word.
• #11294: [IE10] Fixed: Font size is not preserved when pasting from Word.
• #11627: Fixed: Missing words when pasting from Word.
• #12784: Fixed: Bulleted list with custom bullets gets changed to a numbered list when pasting from Word.
• #13174: Fixed: Data loss after pasting from Word.
• #13828: Fixed: Widget classes should be added to the wrapper rather than the widget element.
• #13829: Fixed: No class in Widget wrapper to identify the widget type.
• #13519: Server response received when uploading files should be more flexible.

Other Changes:

• Updated SCAYT (Spell Check As You Type) and WebSpellChecker plugins:
  • Support for the new default Moono-Lisa skin.
  • #121: Fixed: Basic Styles do not work when SCAYT is enabled.
  • #125: Fixed: Inline styles are not continued when writing multiple lines of styled text with SCAYT enabled.
  • #127: Fixed: Uncaught TypeError after enabling SCAYT in the CKEditor <div> element.
  • #128: Fixed: Error thrown after enabling SCAYT caused by conflicts with RequireJS.

Security Updates:

• [Severity: minor] Fixed the target="_blank" vulnerability reported by James Gaskell.

  Issue summary: If a victim had access to a spoofed version of ckeditor.com via HTTP (e.g. due to DNS spoofing, using a hacked public network or mailicious hotspot), then when using a link to the ckeditor.com website it was possible for the attacker to change the current URL of the opening page, even if the opening page was protected with SSL.

  An upgrade is recommended.

New Features:

• #14747: The Enhanced Image caption now supports the link target attribute.
• #7154: Added support for the "Display Text" field to the Link dialog. Thanks to Ryan Guill!

Fixed Issues:

• #13362: [Blink, WebKit] Fixed: Active widget element is not cached when it is losing focus and it is inside an editable element.
• #13755: [Edge] Fixed: Pasting images does not work.
• #13548: [IE] Fixed: Clicking the elements path disables Cut and Copy icons.
• #13812: Fixed: When aborting file upload the placeholder for image is left.
• #14659: [Blink] Fixed: Content scrolled to the top after closing the dialog in a <div>-based editor.
• #14825: [Edge] Fixed: Focusing the editor causes unwanted scrolling due to dropped support for the setActivemethod.