Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
:memo::cocktail: A configurable rich text editor built with Draft.js. Check out our demos!
Draftail aims for a mouse-free, keyboard-centric experience. Here are important features worth highlighting:
-
, *
, 1.
to create a list item.##
, code blocks ```
, text formats **
, and more.draft-js-plugins
ecosystem to build more advanced extensions.This project adheres to Semantic Versioning, and measures performance and code coverage. We also try to follow accessibility best practices (tested with aXe) – please get in touch if you can help us do better in this area.
See anything you like in here? Anything missing? We welcome all support, whether on bug reports, feature requests, code, design, reviews, tests, documentation, and more. Please have a look at our contribution guidelines.
If you just want to set up the project on your own computer, the contribution guidelines also contain all of the setup commands.
Draftail is made possible by the work of Springload. View the full list of contributors. MIT licensed. The draftail.org documentation and demos are powered by Netlify.
This release contains breaking changes compared to v1.4.1. It’s identical to the v2.0.0-rc.6 pre-release.
Documentation: Getting started
FloatingToolbar
component so the editor can be rendered with a minimal height.BlockToolbar
component, intended for keyboard and first-time users.MetaToolbar
component intended to display editor metadata at the bottom of the editor.InlineToolbar
component, which is user-configurable to display either a static or floating toolbar.CommandPalette
component, usable with the commandPalette
rendering prop and the commands
data prop.onPaste
handler for entities to be able to create themselves on paste.Draftail-block--empty
class for styling.Draftail-ToolbarGroup--entities
.block
(static top toolbar), inline
(floating toolbar), meta
(bottom / meta toolbar). They can also have a type
to help with troubleshooting.draftail/lib/index.scss
to draftail/src/index.scss
/
slash character for divisions and separators.For projects using TypeScript, the addition of type definitions is likely to cause new linting issues being reported in case Draftail’s new types are incompatible with the implementation.
draftail/lib/index.scss
to draftail/src/index.scss
The editor now supports modern browsers only, in particular IE11 support has been removed. The new browser support follows evergreen browsers only. The oldest-supported browser is currently Safari 14.1.
| Browser | Device/OS | Version(s) | | ------------- | ---------- | ---------- | | Mobile Safari | iOS Phone | Last 2 | | Mobile Safari | iOS Tablet | Last 2 | | Chrome | Android | Last 2 | | Chrome | Desktop | Last 2 | | MS Edge | Windows | Last 2 | | Firefox | Desktop | Latest | | Firefox ESR | Desktop | Latest | | Safari | macOS | Last 3 |
To introduce RTL support, a lot of the editor’s styles have been rewritten to use CSS logical properties and values, as well as Flexbox and Grid layout. This could lead to issues with bespoke UI customisations.
The controls
prop now takes objects rather than React components. Controls which aren’t updated to the new API will render in the static "top" toolbar only.
Entities now accept a allowlist
attribute rather than whitelist
.
FAQs
📝🍸 A configurable rich text editor built with Draft.js
The npm package draftail receives a total of 1,580 weekly downloads. As such, draftail popularity was classified as popular.
We found that draftail demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.