
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
rich-text-editor
Advanced tools
On 18.10.2024 we released a new major version (v8) of the rich text editor, which was a re-write of the old codebase. This warning is not critical to users of NPM packages using versioning, but users of the unpkg bundle (http://unpkg.com/rich-text-editor/dist/rich-text-editor-bundle.js) will notice that the latest bundle of the code will not work as expected anymore. To avoid a breaking change in your system, you can set the version of the unpkg package explicitly to the last stable version of v7 as follows: http://unpkg.com/rich-text-editor@7.3.0/dist/rich-text-editor-bundle.js
Use of Abitti Trademark policy
Rich text editor with math support for Finnish Matriculation Examination Board. Live demo can be found at https://math-demo.abitti.fi/
Since v4.0.0, only ES2017 code with ES modules is provided (in the dist
directory). If you want to use this library, a bundler such as Webpack or
Rollup is probably needed.
Install the package with npm install rich-text-editor.
Rich text editor can be either used as
import RichTextEditor from 'rich-text-editor'import { makeRichText } from 'rich-text-editor/dist/rich-text-editor'Most properties passed to the component or initialization function are described below. More info can be found in the types and/or source code.
Add a script tag to your HTML page whose source is https://unpkg.com/rich-text-editor/dist/rich-text-editor-bundle.js, e.g. <script type="module" src="https://unpkg.com/rich-text-editor/dist/rich-text-editor-bundle.js"></script>.
This will add makeRichText to window, which can be used to initialize the editor.
The function takes the following parameters as an object:
| Key | Default |
|---|---|
| container | document.getElementById('rich-text-editor-root') |
| language | 'FI' |
| baseUrl | '' |
| allowedFileTypes | ['image/png', 'image/jpeg'] |
| onValueChange | () => {} |
| textAreaProps | {} |
Example:
{
container: document.getElementById('rich-text-editor-root')!,
language: 'FI',
baseUrl: '',
allowedFileTypes: ['image/png', 'image/jpeg'],
onValueChange: () => {},
textAreaProps: {},
}
textAreaProps are passed to the underlying div element that is the visible editor element, here are ones that are relevant for configuration of CDN users:
| Key | type | Purpose |
|---|---|---|
| ariaInvalid | boolean | Add aria-invalid |
| ariaLabelledBy | string | Add aria-labelledby |
| editorStyle | React.CSSProperties | Direct CSS properties to the editor element |
| className | string | Additional class name(s) to the editor element |
| id | string | id-field to the editor element |
| lang | string | lang-field to the editor-element for accessibility |
Rich text editor has been developed to allow candidates of Finnish Matriculation Examination to attach screenshots and write equations as part of their submissions. Our aim is not to create a general-purpose drop-in replacement for textarea but an editor which works in Abitti and its embedded browser.
While we celebrate every bug report, feature request and pull request we kindly ask you to remember following:
We hope you understand our desire to focus on our goal specified by law.
npm install.npm run dev.npm run buildnpm run dev-serverpython3 -m http.server 8080dev/index.html script tag to point to the bundle: <script type="module" src="/dist/rich-text-editor-bundle.js"></script> (don't commit this).Demo: http://digabi.github.io/rich-text-editor/
Source: https://github.com/digabi/rich-text-editor/blob/master/index.html
FAQs
Rich text editor
The npm package rich-text-editor receives a total of 2,051 weekly downloads. As such, rich-text-editor popularity was classified as popular.
We found that rich-text-editor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 22 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.