CKEditor 4.5.2

Fixed Issues:

  • #13609: [Edge] Fixed: The browser crashes when switching to the source mode. Thanks to Andrew Williams and Mark Smeed!
  • PR#201: Fixed: Buttons in the toolbar configurator cause form submission. Thanks to colemanw!
  • #13422: Fixed: A monospaced font should be used in the <textarea> element storing editor configuration in the toolbar configurator.
  • #13494: Fixed: Error thrown in the toolbar configurator if plugin requirements are not met.
  • #13409: Fixed: List elements incorrectly merged when pressing Backspace or Delete.
  • #13434: Fixed: Dialog state indicator broken in Right–To–Left environments.
  • #13460: [IE8] Fixed: Copying inline widgets is broken when Advanced Content Filter is disabled.
  • #13495: [Firefox, IE] Fixed: Text is not word-wrapped in the Paste dialog window.
  • #13528: [Firefox@Windows] Fixed: Content copied from Microsoft Word and other external applications is pasted as a plain text. Removed the CKEDITOR.plugins.clipboard.isHtmlInExternalDataTransfer property as the check must be dynamic.
  • #13583: Fixed: DataTransfer.getData() should work consistently in all browsers and should not strip valuable content. Fixed pasting tables from Microsoft Excel on Chrome.
  • #13468: [IE] Fixed: Binding drag&drop dataTransfer does not work if text data was set in the meantime.
  • #13451: [IE8-9] Fixed: One drag&drop operation may affect following ones.
  • #13184: Fixed: Web page reloaded after a drop on editor UI.
  • #13129 Fixed: Block widget blurred after a drop followed by an undo.
  • #13397: Fixed: Drag&drop of a widget inside its nested widget crashes the editor.
  • #13385: Fixed: editor.getSnapshot() may return a non-string value.
  • #13419: Fixed: The Auto Link plugin does not encode double quotes in URLs.
  • #13420: Fixed: The Auto Embed plugin ignores encoded characters in URL parameters.
  • #13410: Fixed: Error thrown in the Auto Embed plugin when undoing right after pasting a link.
  • #13566: Fixed: Suppressed notifications in the Media Embed Base plugin.
  • #11616: [Chrome] Fixed: Resizing the editor while it is not displayed breaks the editable. Fixes also #9160 and#9715.
  • #11376: [IE11] Fixed: Loss of text when pasting bulleted lists from Microsoft Word.
  • #13143: [Edge] Fixed: Focus lost when opening the panel.
  • #13387: [Edge] Fixed: "Permission denied" error thrown when loading the editor with developer tools open.
  • #13574: [Edge] Fixed: "Permission denied" error thrown when opening editor dialog windows.
  • #13441: [Edge] Fixed: The Clipboard plugin breaks the state of Undo commands after a paste.
  • #13554: [Edge] Fixed: Paste dialog's iframe does not receive focus on show.
  • #13440: [Edge] Fixed: Unable to paste a widget.

Other Changes:

CKEditor 4.5.1

Fixed Issues:

  • #13486: Fixed: The Upload Image plugin should log an error, not throw an error when upload URL is not set.

CKEditor 4.5.0

New Features:

Fixed Issues:

  • #13334: Fixed: Error after nesting widgets and playing with undo/redo.
  • #13118: Fixed: The editor.getSelectedHtml() method throws an error when called in the source mode.
  • #13158: Fixed: Error after canceling a dialog when creating a widget.
  • #13197: Fixed: Linked inline Enhanced Image alignment class is not transferred to the widget wrapper.
  • #13199: Fixed: Semantic Embed does not support widget classes.
  • #13003: Fixed: Anchors are uploaded when moving them by drag and drop.
  • #13032: Fixed: When upload is done, notification update should be marked as important.
  • #13300: Fixed: The internalCommit argument in the Image dialog seems to be never used.
  • #13036: Fixed: Notifications are moved 10px to the right.
  • #13280: [IE8] Fixed: Undo after inline widget drag&drop throws an error.
  • #13186: Fixed: Content dropped into a nested editable is not filtered by Advanced Content Filter.
  • #13140: Fixed: Error thrown when dropping a block widget right after itself.
  • #13176: [IE8] Fixed: Errors on drag&drop of embed widgets.
  • #13015: Fixed: Dropping an image file on Enhanced Image causes a page reload.
  • #13080: Fixed: Ugly notification shown when the response contains HTML content.
  • #13011: [IE8] Fixed: Anchors are duplicated on drag&drop in specific locations.
  • #13105: Fixed: Various issues related to and
  • #11976: [Chrome] Fixed: Copy&paste and drag&drop lists from Microsoft Word.
  • #13128: Fixed: Various issues with cloning element IDs:
  • Toolbar configurators:
    • #13185: Fixed: Wrong position of the suggestion box if there is not enough space below the caret.
    • #13138: Fixed: The "Toggle empty elements" button label is unclear.
    • #13136: Fixed: Autocompleter is far too intrusive.
    • #13133: Fixed: Tab leaves the editor.
    • #13173: Fixed: config.removeButtons is ignored by the advanced toolbar configurator.

Other Changes:

CKEditor 4.4.8

Security Updates:

  • Fixed XSS vulnerability in the HTML parser reported by Dheeraj Joshi and Prem Kumar.

    Issue summary: It was possible to execute XSS inside CKEditor after persuading the victim to: (i) switch CKEditor to source mode, then (ii) paste a specially crafted HTML code, prepared by the attacker, into the opened CKEditor source area, and (iii) switch back to WYSIWYG mode.

An upgrade is highly recommended!

Fixed Issues:

Other Changes:

CKEditor 4.5.0 Beta

New Features:

  • Clipboard (copy&paste, drag&drop) and file uploading features and improvements (#11437).

    • Major features:

      • Support for dropping and pasting files into the editor was introduced. Through a set of new facades for native APIs it is now possible to easily intercept and process inserted files.
      • File upload tools were introduced in order to simplify controlling the loading, uploading and handling server response, properly handle new upload configuration options, etc.
      • Image upload widget was introduced to upload dropped images. A base class for the upload widget was exposed, too, to make it simple to create new types of upload widgets which can handle any type of dropped file, show the upload progress and update the content when the process is done. It also handles editing and undo/redo operations when a file is being uploaded and integrates with the notification aggregator to show progress and success or error.
      • All drag and drop operations were integrated with the editor. All dropped content is passed through the editor#paste event and a set of new editor events was introduced — dragstart, drop, dragend.
      • The Data Transfer facade was introduced to unify access to data in various types and files. Data Transfer is now always available in the editor#paste event.
      • Switched from the pastebin to using the native clipboard access whenever possible. This solved many issues related to pastebin such as unnecessary scrolling or data loss. Additionally, on copy and cut from the editor the clipboard data is set. Therefore, on paste the editor has access to clean data, undisturbed by the browsers.
      • Drag and drop of inline and block widgets was integrated with the standard clipboard APIs. By listening to drag events you will thus be notified about widgets, too. This opens a possibility to filter pasted and dropped widgets.
      • The editor#paste event can have the range parameter so it is possible to change the paste position in the listener or paste in the not selectable position. Also the editor.insertHtml() method now accepts range as an additional parameter.
      • #11621: A configurable paste filter was introduced. The filter is by default turned to 'semantic-content' on Webkit and Blink for all pasted content coming from external sources because of the low quality of HTML that these engines put into the clipboard. Internal and cross-editor paste is safe due to the change explained in the previous point.
    • Other changes and related fixes:

      • #12095: On drag and copy of widgets the same method is used to get selected HTML as in the normal case. Thanks to that styles applied to inline widgets are not lost.
      • #11219: Fixed: Dragging a captioned image does not fire the editor#paste event.
      • #9554: [Webkit Mac] Fixed: Editor scrolls on paste.
      • #9898: [Webkit&Divarea] Fixed: Pasting causes undesirable scrolling.
      • #11993: [Chrome] Fixed: Pasting content scrolls the document.
      • #12613: Show the user that they can not drop on editor UI (toolbar, bottom bar).
      • #12851: [Blink/Webkit] Fixed: Formatting disappears when pasting content into cells.
      • #12914: Fixed: Copy/Paste of table broken in div-based editor.
    • Browser support.
      Browser support for related features varies significantly (see

      • File APIs needed to operate and file upload is not supported in Internet Explorer 9 and below.
      • Only Chrome and Safari on Mac OS support setting custom data items in the clipboard, so currently it is possible to recognize the origin of the copied content in these browsers only. All drag and drop operations can be identified thanks to the new Data Transfer facade.
      • No Internet Explorer browser supports the standard clipboard API which results in small glitches like where only plain text can be dropped from outside the editor. Thanks to the new Data Transfer facade, internal and cross-editor drag and drop supports the full range of data.
      • Direct access to clipboard could only be implemented in Chrome, Safari on Mac OS, Opera and Firefox. In other browsers the pastebin must still be used.
  • #12875: Samples and toolbar configuration tools.

    • The old set of samples shipped with every CKEditor package was replaced with a shiny new single-page sample. This change concluded a long term plan which started from introducing the CKEditor SDK and CKEditor Functionality Overview section in the documentation which essentially redefined the old samples.
    • Toolbar configurators with live previews were introduced. They will be shipped with every CKEditor package and are meant to help in configuring toolbar layouts.
  • #10925: The Media Embed and Semantic Media Embed plugins were introduced. Read more about the new features in the Embedding Content article.

  • #10931: Added support for nesting widgets. It is now possible to insert one widget into another widget's nested editable. Note that unless nested editable's allowed content is defined precisely, starting from CKEditor 4.5 some widget buttons may become enabled. This feature is not supported in IE8. Included issues:

    • #12018: Fixed and reviewed: Nested widgets garbage collection.
    • #12024: [Firefox] Fixed: Outline is extended to the left by unpositioned drag handlers.
    • #12006: Fixed: Drag and drop of nested block widgets.
    • #12008: Fixed various cases of inserting a single non-editable element using the editor.insertHtml() method. Fixes pasting a widget with a nested editable inside another widget's nested editable.
  • Notification system:

  • #11636: Introduced new, UX-focused, methods for getting selected HTML and deleting it — editor.getSelectedHtml() and editor.deleteSelectedHtml().
  • #12416: Added the widget.definition.upcastPriority property which gives more control over widget upcasting order to the widget author.
  • #12036: Initialize the editor in read-only mode when the <textarea> element has a readonly attribute.
  • #11905: The resize event passes the current dimensions in its data.
  • #12126: Introduced config.image_prefillDimensions and config.image2_prefillDimensions to make pre-filling width and height configurable for the Enhanced Image.
  • #12746: Added a new configuration option to hide the Enhanced Image resizer.
  • #12150: Exposed the getNestedEditable() and is* widget helper functions (see the static methods).
  • #12448: Introduced the editable.insertHtmlIntoRange method.
  • #12143: Added the config.floatSpacePreferRight configuration option that switches the alignment of the floating toolbar. Thanks to InvisibleBacon!
  • #10986: Added support for changing dialog input and textarea text directions by using the Shift+Alt+Home/End keystrokes. The direction is stored in the value of the input by prepending the \u202A or \u202B marker to it. Read more in the documentation. Thanks to edithkk!
  • #12770: Added support for passing widget's startup data as a widget command's argument. Thanks to Rebrov Boris and Tieme van Veen!
  • #11583: Added support for the HTML5 required attribute in various form elements. Thanks to Steven Busse!


Fixed issues:

  • #11586: Fixed: range.cloneContents() should not change the DOM in order to not affect selection.
  • #12148: Fixed: dom.element.getChild() should not modify a passed array.
  • #12503: [Blink/Webkit] Fixed: Incorrect result of select all and Backspace or Delete.
  • #13001: [Firefox] Fixed: The <br /> filler is placed in the wrong position by the range.fixBlock method due to Firefox quirky behavior.
  • #13101: [IE8] Fixed: IE8 prepends colons to HTML5 element names when cloning them.
Twitter Facebook Facebook Instagram Medium Linkedin GitHub Arrow down Phone Menu Close icon Check