tinymce
WindowManager/NotificationManager don't escape HTML and docs are unclear
What is the current behavior? Describe the bug WindowManager.alert("") WindowManager.confirm("") - both of these are doc'd as "message:String" NotificationManager.open({text: ""}) - the "text" type isn't documented at all
Please provide the steps to reproduce and if possible a minimal demo of the problem via fiddle.tiny.cloud or similar.
What is the expected behavior? They accept HTML which is great for rich formatting, but for people not expecting this, special characters may render incorrectly. For NotificationManager, accepting a "text" or "html" property in the object would've made sense, but having "text" accept HTML is confusing. And this pattern doesn't help with WindowManager, which takes parameters not a JSON object.
Maybe a more global solution is to have a TINYMCE.toHtml(text:String) function which wraps text if not already Html, and any string parameters/properties can be (String|Html), where String is assumed text that needs to be escaped as Html. I'm sure there are other API areas where this is an issue also. I tried the Registry.addButton() with HTML, but it escaped the text and HTML wasn't possible. I don't know the stance on making breaking API changes if the get documented in the changelog.
Which versions of TinyMCE, and which browser / OS are affected by this issue? Did this work in previous versions of TinyMCE? 6.5.1
This issue is stale because it has been open 365 days with no activity. Please comment if you wish to keep this issue open or it will be closed in 30 days.
This issue was closed because it has been stalled for 30 days with no activity.