CKEditor not secure?

[CodeALot]

PHP-Version: 8.2.20
WebsiteBaker-Version: 2.13.5 -r220
Last cumulative update-revision: R223 - (16-01-2024 19:02:02)

"This CKEditor 4.22.1 version is not secure. Consider upgrading to the latest one, 4.24.0-lts."

Is there a solution for this?

[sternchen8875]

the ckeditor make's a version check, to get some infos from the ckeditor-group, to display it in the ckeditor-info-windows. if he get no answer from there, it display this error message (in all cms, not only wb)

you can use the fixed version from here -> https://addon.WebsiteBaker.org/pages/en/browse-add-ons.php?download=08A769F

or add this line in your wb_ckconfig.js (nearly the line 140 ff)

Code: [Select]

config.versionCheck = false;

[CodeALot]

or add this line in your wb_ckconfig.js (nearly the line 140 ff)

Code: [Select]

config.versionCheck = false;

That did the trick, thanks
Can we have that by default? I remember CKEditor had this same problem some time ago...

[sternchen8875]

it is default now in the linked download (my last posting)
and part of the next WB-Versions

[sternchen8875]

for all those who are wondering: what error message...
Here is a picture from the editor



here the official docs

https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_config.html#cfg-versionCheck

[Matthias]

Hello, I just got the mentioned error message that ckeditor is not secure.

I run PHP-Version: 8.0.30
WebsiteBaker-Version: 2.13.5 -r220
Last cumulative update-revision: R223

and I installed the latest ckeditor from the wb Download area version 4.22.1.1.
The wb_ckconfig.js contains the mentioned line with the parameter 'false'. Are there any news on the topic or do I have to set another parameter?

Thanks for your help!

Matthias

[sternchen8875]

two possible problems....

#1 - clear the browser cache! -  (my favorite) - maybe, one pass is not enough

#2 - check the used frontend templates for another file "wb_ckconfig.js". if you use one or more of them, it needs the setting

Code: [Select]

config.versionCheck = false;in every used wb_ckconfig.js

for example also in /templates/DefaultTemplate/js/wb_ckconfig.js


Sometimes it helps, to add this code additionally in /modules/ckeditor/include.php / ~ Line 280

Code: [Select]

$ckeditor->config['versionCheck'] = false;
Here some other threads (in german)
https://forum.WebsiteBaker.org/index.php/topic,32337.msg226456.html#msg226456
https://forum.WebsiteBaker.org/index.php/topic,32285.0.html

[Matthias]

Good Morning, #1 did the job. I am sorry to make you work with my question and not have checked the easiest things before .
Thank you very much for your help!
best regards

Matthias

[sternchen8875]