Fixed "Insert link" doesn't respect cursor position anymore since XenForo 2.2.13

Chris D said:
We have rolled out Froala v4.0.19 today here which appears to have resolved this issue.
Click to expand...
Out of pure interest - With Froala, since June when 4.0.19 was released, there's been 3 further releases including a major version change (4.1) - would bringing XFs version of the editor in-line with the newest update pose great benefits? It looks like there's some decent accessibility improvements, too.
 
Would it be possible to get a mini patch for this like we got for the other error regarding links? 2.3 seems it'll be a couple months away still and my members are frustrated.
 
btmgreg said:
Out of pure interest - With Froala, since June when 4.0.19 was released, there's been 3 further releases including a major version change (4.1) - would bringing XFs version of the editor in-line with the newest update pose great benefits? It looks like there's some decent accessibility improvements, too.
Click to expand...
4.1.2 has a bug with Safari browsers not showing the editing toolbar
 
zappaDPJ said:
Including an XSS vulnerability in 4.1.1 which appears to have gone unfixed in 4.1.2.

Click to expand...
The severity of this is very much diminished in XF, reclassifying it as more of a self-XSS vector than anything.

By the time XF gets a hold of the output this generates, it is essentially sanitised by virtue of us converting it to BB code.

That being said, very alarming for anyone who may be using Froala output without sanitization, and even more alarming that they are comfortable to ignore it for an entire release cycle.

The iPad/iOS bug is still not marked as fixed, despite them now having it clearly explained to them exactly what the issue is.
 
Top Bottom