Download Latest Version 3.0.3 source code.tar.gz (436.7 kB)
Email in envelope

Get an email when there's a new version of Neiki's Editor

Home / 2.9.4
Name Modified Size InfoDownloads / Week
Parent folder
2.9.4 source code.tar.gz 2026-05-17 379.3 kB
2.9.4 source code.zip 2026-05-17 383.0 kB
README.md 2026-05-17 1.6 kB
Totals: 3 Items   763.9 kB 0

2.9.4

Added

  • Enhanced Image Upload Dialog — redesigned the image insert dialog with a prominent visual upload area for a clearer and more modern upload experience
  • Click-to-Select Upload Area — clicking anywhere in the upload zone now opens the native file picker
  • Drag & Drop Image Uploads — images can now be dragged directly into the upload area
  • Selected File Feedback — the upload dialog now displays feedback when a file has been selected
  • Responsive upload-zone styling optimized for compact mobile and touch-friendly interaction

Fixed

  • Floating Toolbar Scroll Offset — fixed incorrect positioning of the floating selection toolbar when the page is scrolled while using a sticky editor toolbar
  • Autosave Regex Hardening — reworked autosave storage key normalization to avoid a polynomial regular expression on uncontrolled input
  • Removed selector-string URL escaping when applying target="_blank" to selected links

Improved

  • Reworked HTML sanitization parsing to avoid DOMParser.parseFromString while preserving the existing sanitization allowlist behavior
  • Improved upload dialog usability across desktop and mobile devices

Security

  • Reduced ReDoS risk in autosave key normalization logic
  • Hardened sanitization internals while maintaining existing HTML allowlist behavior
  • Further reduced attack surface identified by static analysis and security scanning

Changed

  • License changed from MIT to GNU Affero General Public License v3 (AGPL-3.0)

Full Changelog: https://github.com/neikiri/neiki-editor/compare/2.9.3...2.9.4

Source: README.md, updated 2026-05-17