What is @ckeditor/ckeditor5-remove-format?
@ckeditor/ckeditor5-remove-format is a plugin for CKEditor 5 that allows users to remove formatting from selected text. This can be particularly useful in rich text editors where users may want to clear styles and formatting applied to text, reverting it to plain text.
What are @ckeditor/ckeditor5-remove-format's main functionalities?
Remove Formatting
This feature allows users to remove all formatting from the selected text. The code sample demonstrates how to integrate the RemoveFormat plugin into a CKEditor 5 instance and add the 'removeFormat' button to the toolbar.
ClassicEditor.create(document.querySelector('#editor'), { plugins: [ RemoveFormat ], toolbar: [ 'removeFormat' ] })
Other packages similar to @ckeditor/ckeditor5-remove-format
quill
Quill is a modern WYSIWYG editor built for compatibility and extensibility. It includes a 'clean' feature that removes all formatting from the selected text, similar to @ckeditor/ckeditor5-remove-format. However, Quill is a standalone editor and not a plugin for CKEditor.
tinymce
TinyMCE is another popular rich text editor that offers a 'removeformat' command to clear formatting from selected text. Like Quill, TinyMCE is a full-featured editor and not a plugin for CKEditor, but it provides similar functionality for removing text formatting.
43.1.1 (September 25, 2024)
We are happy to announce the release of CKEditor 5 v43.1.1.
During a recent internal audit, we identified a Cross-Site Scripting (XSS) vulnerability in the CKEditor 5 clipboard package (CVE-2024-45613
). This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert malicious content into the editor, which might happen with a very specific editor configuration.
This vulnerability affects only installations where the editor configuration meets the following criteria:
- The Block Toolbar plugin is enabled.
- One of the following plugins is also enabled:
You can read more details in the relevant security advisory and contact us if you have more questions.
Taking the occasion, we decided to introduce additional hardening to some parts of our codebase that introduce theoretical and unexploitable issues. Our security team confirmed that none of these issues were exploitable in a real scenario, however, we decided to fix them, in order to increase the overall security posture of our software.
Released packages
Check out the Versioning policy guide for more information.
<details>
<summary>Released packages (summary)</summary>
Other releases:
</details>