Skip to content

Commit

Permalink
DOC-2302: add convert_unsafe_embeds breaking change to 7.0 release no…
Browse files Browse the repository at this point in the history
…tes.
  • Loading branch information
kemister85 committed Feb 26, 2024
1 parent a9688f9 commit 1820592
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 2 deletions.
13 changes: 13 additions & 0 deletions modules/ROOT/pages/7.0-release-notes.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -218,6 +218,19 @@ Any editors using this `highlight_on_focus: true` option, can remove this option

// CCFR here.

=== `convert_unsafe_embeds` editor option is now defaulted to `true`.

In {productname} 6.8.1, https://www.tiny.cloud/docs/tinymce/latest/6.8.1-release-notes/#new-convert_unsafe_embeds-option-that-controls-whether-object-and-embed-elements-will-be-converted-to-more-restrictive-alternatives-namely-img-for-image-mime-types-video-for-video-mime-types-audio-audio-mime-types-or-iframe-for-other-or-unspecified-mime-types[convert_unsafe_embeds] editor option was introduced to support a security issue regarding object tags, which was a legacy method of inserting an external resource, such as a video, a PDF.

{productname} has determined that the object tag is regarded as unsafe and with this, {productname} 7.0 will change the default value from `false` to `true`, constituting a breaking change for users whose editor version is below 7.0.

This means that starting from version {productname} 7.0, all object tags will be automatically converted when loading the editor.

[NOTE]
To prevent automatic conversion of content, users are advised to include convert_unsafe_embeds: false in their {productname} initialization configuration.

For further details on this option, refer to the xref:content-filtering.adoc#content-unsafe-embeds[convert_unsafe_embeds] option, or see xref:migration-from-6x.adoc#convert-unsafe-embeds-option[migration from 6x guide].


[[bug-fixes]]
== Bug fixes
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -30,14 +30,14 @@ When converted to `<img>`, `<video>`, or `<audio>`, this prevents the embedded r

*Possible values:* `true`, `false`

*Default value:* `false`
*Default value:* `true`

===== Example: using `convert_unsafe_embeds` option

[source,js]
----
tinymce.init({
selector: 'textarea', // change this value according to your html
convert_unsafe_embeds: true
convert_unsafe_embeds: false
});
----

0 comments on commit 1820592

Please sign in to comment.