i have added easyeditor to my website since it was minimalistic and actually could load angularjs content i had imported to a certain div. the thing is, whenever i click any of the buttons, website refreshes.

it might be hard to present code, website is pretty complex

Hey there!

I belong to an open source security research community, and a member (@ning1022) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

I have a case that I need to use the EasyEditor as ES-6 Module as follows:

import EasyEditor from 'easyeditor';

Usage Scenario with vite

The scenario I am doing is that I did first:

npm install --save jquery easyeditor

Then in my laravel project I used the vite with the following vite.config.js:

import { defineConfig } from 'vite';
import laravel from 'laravel-vite-plugin';

import { readdirSync,lstatSync } from 'fs';
import { resolve } from 'path';


function getFilesFromDir(dir) {
    const filesToReturn = [];

    function walkDir(currentPath) {

        if(lstatSync(currentPath).isFile()){
            filesToReturn.push(currentPath);
            return;
        }

        const files = readdirSync(currentPath);
        for (let i in files) {
            console.log(files[i]);
            const curFile = resolve(currentPath, files[i]);
            if(lstatSync(curFile).isDirectory()){
                walkDir(curFile);
                continue;
            }
            const file = resolve(currentPath, files[i]);
            filesToReturn.push(file);
        }
    }

    walkDir(resolve(__dirname, dir));
    return filesToReturn;
}


// Get all .css and .scss files in the directory
const js = getFilesFromDir('./resources/js');

const paths = [


    ...js,

    'node_modules/jquery/dist/jquery.js',
    'node_modules/jscroll/dist/jquery.jscroll.min.js',

    "node_modules/easyeditor/src/easyeditor.css",
    "node_modules/easyeditor/src/jquery.easyeditor.js"
]



export default defineConfig({
    plugins: [
        laravel({
            input:paths,
            refresh: true,
        }),
    ],
    build: {
        rollupOptions: {
            external: [
                "js/modules/*",
            ],
            include:[
                'assets/js/utils.js'
            ]
        }
    }
});

And then I do npm run build.

But in the documentation I see no case on how can be used with ES-6 modules. To be more specific I see no usage with vite into these pages:

• http://habibhadi.com/lab/easyeditor/index.html
• http://habibhadi.com/lab/easyeditor/default-example.html

That helps me to reduce the nessesary dependencies upon page load because vite (and webpack or silimar tools) do optimize Js code removing unsused functions, resulting faster page load.

Is there a way to do it?

It appears that textareas replaced with easyeditor are no longer part of the natural tab order for the form

I need limit textbox area.

When I try to insert a link, the alert dialog opens up, I put a link and press the button - the same alert opens again. It happens three times even if I cancel it.

Update: it can happen more times. I thinks it delegates the same as the other issue i reported.

TIP: I think it would be better to make the prompt window not an alert, but a div that stick to the top of the text editor area (position:absolute) and upon save it closes up, better for mobile devices.

Hi,

http://stackoverflow.com/questions/18665830/getting-the-class-attribute-works-in-ie9-but-not-ie8

IE8 does bug when we try to use class as an attribute of an object, the solution is to use it explicitly as a string.
class: ..., => 'class': ...,
node.class => node['class']

Regards,

When I load the editor everything works fine. When I inject the HTML of the editor and initialize it, when clicking enter, it put an extra
. So the third time, it put three
instead of one.

I don't know why it works like that, because I can't find anything in the local storage or something that remembers the last input. I override the html and the textarea.

After debugging, when I press ENTER, the line: 'easyEditor.prototype.handleKeypress' runs twice and goes to the line that prints

.

How can I put editable HTML in the editor. I tried putting HTML (e.g. link) in the textarea, and although it is rendered as link, I can't edit it nor remove it. I need it because I am making an edit window and using it to edit a chosen HTML text. So I need to be able ti import the HTML and edit it.

How can I do that?

Thanks in advance.