Releases for CKEditor 4 - WYSIWYG HTML editor

Minor bug-fixing release of the CKEditor for Drupal module.
Upstream CKEditor library default version update due to its CVEs.

If you use the CKEditor module for Drupal 7.x, upgrade to CKEditor 7.x-1.23

Important note: If you use the CKEditor CDN, it is highly recommended to update the CKEditor JavaScript library to the newest version. To do so, edit the "CKEditor Global profile" settings in admin panel, at /admin/config/content/ckeditor/editg.

The current version can be found at https://cdn.ckeditor.com/.

Also, see the CKEditor - WYSIWYG HTML editor project page.

Initial contrib release of CKEditor (4) module now that we're removing it from Drupal Core.

(No changes since RC1.)

This is a small bug-fixing release of the CKEditor for Drupal module.

If you use the CKEditor module for Drupal 7.x, upgrade to CKEditor 7.x-1.21

Important note: If you use the CKEditor CDN, it is highly recommended to update the CKEditor JavaScript library to the newest version. To do so, edit the "CKEditor Global profile" settings in admin panel, at /admin/config/content/ckeditor/editg.

The current version can be found at https://cdn.ckeditor.com/.

Security update.

• CKEditor - Cross Site Scripting (XSS) - SA-CONTRIB-2020-007

Install the latest version:

• If you use the CKEditor module for Drupal 7.x, upgrade to CKEditor 7.x-1.19

Important note: If you use the CKEditor CDN, it is highly recommended to update the CKEditor JavaScript library to the newest version (at least 4.14.0).
To do so, edit the "CKEditor Global profile" settings in admin panel, at /admin/config/content/ckeditor/editg.

Current version can be found at https://cdn.ckeditor.com/.

Also see the CKEditor - WYSIWYG HTML editor project page.

Major change: Media integration has been removed in 7.x-1.17, please use https://www.drupal.org/project/media_ckeditor for that plugin.

Changes since 7.x-1.16:

Security update.

SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting (XSS)

This is an important bug fixing release, which also introduces a couple of new features. Loading CKEditor from an external URL is now supported - thanks to this feature, the CKEditor module is able to load CKEditor from CDN and the manual download of CKEditor library is now optional.

Important: the <code> tag isn't protected now by default in CKEditor, in wysiwygarea. If your installation of Drupal requires this, edit ckeditor.config.js and uncomment the relevant line.

Key improvements in this release:
- Libraries API is used for CKEditor
- Better support for Drush

Full list of changes:

#1063482: Use Libraries API for CKEditor by nod_, wwalc, roderik, helior, hadsie: Use Libraries API for CKEditor
#1898294: Fatal error if Libraries module is enabled after CKEditor by kscheirer: Fatal error if Libraries module is enabled after CKEditor
#1961596: Add "feature_source" option so that ckeditor_profile component is visible in drush by jcisio: Added 'feature_source()' option so that ckeditor_profile() component is visible in Drush.
#1356026: Profile loses text formats when exported into a feature using Drush by Volx, hctom: Fixed Profile loses text formats when exported into a feature using Drush.
#1895278: WYSIWYG editor should allow Drupal to trigger 'formUpdated' event by wwalc WYSIWYG editor should allow Drupal to trigger 'formUpdated' event
#1957066: Use field_extra_fields to be able to position the "Rich text editor settings" fieldset by rudiedirkx: Use field_extra_fields to be able to position the "Rich text editor settings" fieldset
#1959754: CKFinder is not installed correctly - improve information in the status report by wwalc: CKFinder is not installed correctly - improve information in the status report
#1810910: Comments gets filtered out by ckeditor_filter_xss by mokaspar, jcisio, DeFr: Fixed Comments gets filtered out by ckeditor_filter_xss().
#1909318: Useless file inclusion in ckeditor.info by Simon Georges: Useless file inclusion in ckeditor.info.
#1603014: Modify original string for translation by anou, SebCorbin: Corrected strings used in Security section.
#1889010: Problem with CKFinder files upload when private download method is used by michal_cksource: Problem with CKFinder files upload when private download method is used
#1885950: Fix HTML validation for iframe in profile configuration. by michal_cksource: Fix HTML validation for iframe in profile configuration
#1885938: Disable div based editor on default by michal_cksource: Disable div based editor on default

Bug fixes:
#1870288: [D6] Disable plugins which not exists and are stored in ckeditor profiles
Disable plugins which not exists and are stored in ckeditor profiles

New features:
#1858840: [D7] Add option to enable/disable aggregate ckeditor.js script
Add option to enable/disable aggregate ckeditor.js script
#1847662: [D7] Add support for CKEditor v4
Add support for CKEditor v4

New features:
#1489358: [D7] Add support for stylesheetparser plugin
Add support for stylesheetparser plugin
#1483402: [D7] Change security filters policy
Change security filters policy

This bug fixing release fixes just one small issue, which had to be fixed quickly, to remove incorrect error messages from the Status Report, which appeared when CKFinder was installed.

Fixed bugs:

- When CKFinder was installed, CKEditor module displayed incorrect error messages in the Status Report section of Drupal (CKEditor module was unable to find the path to CKFinder).

Security update:
Fixes SA-CONTRIB-2012-040 - (F)CKeditor XSS, arbitrary code execution.

New features:

This release fix problems caused by local repository failure during creating latest release (7.x-1.5).
#1337064: Fatal error: Call to undefined function db_fetch_object() Fix Fatal error: Call to undefined function db_fetch_object()

Bug fixes:
#1327818: [D6] Unable to edit settings
Fix to edit settings
#1326660: [D6] "Rewrite the output of this field" (Views option)
Fix for "Rewrite the output of this field" (Views option)

New features:
#1310198: [D7] Counter plugin to count symbols and words
Add plugin to count symbols and words inside CKEditor
#1280298: [D7] Add configuration option to disable text format filters in filter/xss request

New features:
#1187808: [D7] Not formatting text between code tags
Not formatting text between code tags
#1176208: [D7] Add plugins management in profile settings
Add plugins management in profile settings
#1179880: [D7] Add hook to register a plugin Add hook to register a plugin
#1231338: Features module support for Drupal 7 (exporting profiles)
Features module support for Drupal 7 (exporting profiles)
#1257308: [D7] Add loading sample toolbar to profile configuration
Add loading sample toolbar to profile configuration
#1258326: [D7] Add configuration option for setting CKEditor plugins directory
Add configuration option for setting CKEditor plugins directory
#1260892: [D7] Add regex to work with new CKEditor toolbar format (toolbar groups compatible with WAI-ARIA)
Add regex to work with new CKEditor toolbar format (toolbar groups compatible with WAI-ARIA)

Bug fixes:
#1186880: [D7] Handling arrays in the "Custom JavaScript configuration"
Handling arrays in the "Custom JavaScript configuration"
#1183218: [D7] Teasers for long paragraphs broken
Fix broken teasers for long paragraphs
#1176212: [D7] Remove not supported linktomenu and linktonode plugins
Remove not supported linktomenu and linktonode plugins
#1063646: [D7] Fix calling Undefined index: "loadPlugins" in ckeditor_admin_values_to_settings()
Fix calling Undefined index: "loadPlugins" in ckeditor_admin_values_to_settings()
#1032120: Formatting is lost when editing a node
Formatting is lost when editing a node
#1196166: [D7] Bug in custom JavaScript configuration - editor not showing in some cases
Bug in custom JavaScript configuration - editor not showing in some cases
#1201180: [D7] SCAYT spelling language does not match node language
SCAYT spelling language does not match node language
#1198068: Confusing behavior with IMCE button implementation
Confusing behavior with IMCE button implementation
#1190278: CKEditor does not work with the Insert module
CKEditor does not work with the Insert module
#1215032: Bad location of the configuration file in the description of CKEditor profile
Bad location of the configuration file in the description of CKEditor profile
#1216104: [D7] Bug in custom JavaScript configuration - semicolon problem
Bug in custom JavaScript configuration - semicolon problem
#1235142: README.TXT - Installing CKFinder - wrong permission name
README.TXT - Installing CKFinder - wrong permission name
#1245306: [D7] "Custom JavaScript configuration" field description is wrong

New features:
#1190280: [D6] Add configuration option for setting CKEditor's plugins directory
Add configuration option for setting CKEditor's plugins directory
#1080270: [D6] Not formatting text between code tags
Not formatting text between code tags
#1174144: [D6] Add plugins managment in profile settings
Add plugins managment in profile settings
#1095908: CKEditor not load when Apache mod_pagespeed is enabled
Add Google PageSpeed and Drupal JS/CSS aggregation support
#1117548: HTML Entities option configurable in each profile
Add HTML Entities configurable option in each profile
#738270: Add support for theme name in include/exclude in editor profile configuration
Add support for theme name in include/exclude in editor profile configuration
#1108900: Add warning message when wysiwyg module is enabled in Drupal 6
Add a warning message when the wysiwyg module is enabled in Drupal 6
#758936: Add automatic setting of the CKFinder library path based on CKEditor library path
Add automatic setting of the CKFinder library path based on CKEditor library path
#1165870: [D6] Improve manual selection of the user interface color
Improve manual selection of the user interface color
#1166936: Update user guide link
Update User Guide link
#1166972: Remove bullets from lists (Format, Font, etc.) in CKEditor on Garland theme
Remove bullets from drop-down lists (Format, Font, etc.) in CKEditor on Garland theme
#1167034: [D6] Add tableresize plugin support for CKEditor library >= 3.6
Add tableresize plugin support for CKEditor library >= 3.6
#1103872: Change name of ckeditor.make to ckeditor.make.example for drush make module
Change "ckeditor.make" name to "ckeditor.make.example" for drush make module

Bug fixes:
#975746: [D6] Handling arrays in the "Custom javascript configuration"
Handling arrays in the "Custom javascript configuration"
#1184792: [D6] Move CKEditor module to "User interface" package
Move CKEditor module to "User interface" package
#1177062: [D6] Fix broken teasers for long paragraphs
Fix broken teasers for long paragraphs
#1179912: [D6] Add hook to register plugin
Add hook to register plugin
#1179766: [D6] Fix calling undefined index: loadPlugins in ckeditor_admin_values_to_settings()
Fix calling undefined index: "loadPlugins" in ckeditor_admin_values_to_settings()
#1166984: Correct CKEditor simple toolbar
Correct CKEditor simple toolbar
#1099748: Fix drush make error when building a site with CKEditor

New features:
#1068026: CKEditor Link support Added support for CKEditor Link module
#906846: Support the Features module API to allow bundling of CKEditor's visibility settings
Support the Features module API to allow bundling of CKEditor's visibility settings
#969486: Add elFinder file manager support Added support for elFinder file manager support
#695264: Add support for CKEditor SWF Added support for CKEditor SWF module
#1037882: Add admin/build/views/* to 'Fields to exclude/include' section in Global Profile.
Add admin/build/views/* to 'Fields to exclude/include' section in Global Profile
#1050118: Added better support for Line break converter. CKEditor is now able to load properly content where new line characters were used
Added better support for Line break converter. CKEditor is now able to load properly content where new line characters were used to create new lines
#865710: Provide a "ckActiveId" variable for tracking the active editor
Provide a " Drupal.ckeditorActiveId" variable for tracking the active editor
#960576: Add loading ckeditor.css from theme.
Add loading ckeditor.css from theme
#1011178: Support the 'drush make' command
Added support for the 'drush make' command
#935566: Media Embed translation Added Media Embed translation
#940376: Migration from fck schema_version 6202
Added schema version 6202 from FCKeditor module during migration

Bug fixes:
#1019950: CKEditor Will Not Load CKEditor Will Not Load - remove CKEditor is not defined
#1022208: 'Send to rich text editor' fails with latest WebFM
'Send to rich text editor' fails with latest WebFM
#751672: table top border creates unwanted borderline
Table top border creates unwanted borderline
#1015822: IMCE button in not visible in toolbar (but is here) with CKEditor 3.5
IMCE button in not visible in toolbar with CKEditor 3.5
#964556: Drupal.ckeditorCompareVersion does not check properly version number

Changes vs CKEditor-6.x

The main change comparing to the CKEditor module for Drupal 6 is the way of enabling/disabling CKEditor on selected textareas.

In version 6.x users were forced to define the set of include/exclude rules based on the ID of textarea or the path to the page. In Drupal 7 things are now much more simple. All you have to do is to pick up the input formats where CKEditor should be enabled :-)

This is the first official release of CKEditor module for Drupal 7. Tested with Drupal RC2.

Main features:
- as always, enables CKEditor in Drupal and provides lots of configuration options to adjust easily the editor to your needs
- CKFinder integration
- CKEditor profiles are now assigned to input formats (yes!)

This is the next stable release of the CKEditor module.

• CKEditor now works with Panels :-)
• Three new translations are now available: Spanish, German and French.
• Some new configuration options were introduced: force paste as plain text, better control over the output formatting, changing LTR/RTL direction in the editing area.
• A new plugin for IMCE is available.

-- 2010-03-10
- #674454: Add drush integration to download the CKEditor library Changed drush command name

-- 2010-03-09
- #736786: CKEditor is incompatible with Installation profiles. by irakli: CKEditor is incompatible with Installation profiles

-- 2010-03-06
- #732264: CKEditor + Panels - CKEditor dialogs not accessible Fixed ckeditor dialog when editor is running in modal window from ctools

-- 2010-03-05
- #733512: [IE] problem with showing editing area in Garland Fixed editing area size

-- 2010-03-04
- #731086: Notice: Undefined index: #rows / #value Notice: Undefined index: #rows / #value
- #703960: The CKEditor fails to load sporadically if the teaser of the node is empty by hinanui: The CKEditor fails to load sporadically if the teaser of the node is empty
- #703428: Add forcePasteAsPlainText to CKEditor profile Add forcePasteAsPlainText to CKEditor profile
- #707878: Where has the format source option gone Add output formatting
- #725880: RTL solution for actual editor content RTL solution for editor

-- 2010-03-02
- #729142: Notice: Undefined variable: filebroswer in ckeditor.module on line 703 Notice: Undefined variable: filebroswer in ckeditor.module on line 703
- #728212: Looks for contents.css in wrong location by morningtime: Looks for contents.css in wrong location
- #679976: ckeditor with Panels support Panels
- #721914: Opening IMCE window without Image Dialog Opening IMCE window without Image Dialog

-- 2010-03-01

Dev release, generated 2 times per day. Contains the latest code, thus may be less stable than the official release.
On the other side, recent bug fixes can only be found here (and in the CVS repository).

See current changelog to see what have been fixed recently.