bordeux / html-5-wysiwyg-editor Goto Github PK

Hi,

The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI

javascript:alert%28location%29

then it works. The attacker can execute arbitrary code of his choice. Please fix this issue. Thanks

Hello:

I have one recommendation english languaje have the same definition that polish:
var h5w_lang_pl = {
"home" : "Home",
"insert" : "Insert",
"htmlelements" : "HTML Elements",
You can change to:
var h5w_lang_es = {
"home" : "Home",
"insert" : "Insert",
"htmlelements" : "HTML Elements",

How I can correct the above and add the lang?

If I enter a relative hyperlink such as 'myfile.html' the program changes it to 'editor.html/my file.html.
This is a problem. It should be possible to enter relative URLs without prefixing 'http:' or 'file:'.

Hi,
First, thanks for all good code. Do you got new theme?
And do you want to add language support?

hello world