All Versions
29
Latest Version
Avg Release Cycle
133 days
Latest Release
32 days ago
Changelog History
Page 1
Changelog History
Page 1
-
v2.1.19 Changes
May 09, 2026Dependencies
- ⬆️ Upgrade DOMPurify to 3.4.2 from 3.2.7 by @flavorjones in #1310
Full Changelog : v2.1.18...v2.1.19
-
v2.1.18 Changes
March 26, 2026🔒 Security
- Sanitize javascript: URI in JSON drag-drop deserialization by @flavorjones in #1293
Infrastructure/CI
- ci: harden GitHub Actions workflows by @flavorjones in #1284
Full Changelog : v2.1.17...v2.1.18
-
v2.1.17 Changes
March 11, 2026🔒 Security
- ➕ Address potential XSS vector via
data-trix-serialized-attributessanitizer bypass by @flavorjones in #1282
🐛 Bug fixes
- 🛠 Fix bullets merging with prior elements on Firefox when the first node is removed by @monorkin in #1280
Infrastructure/CI
- ✅ Replace Karma with
@web/test-runnerby @flavorjones in #1272 - ci: get green (2026-01-09 edition) by @flavorjones in #1276
- ✅ Report web-test-runner test failures by @flavorjones in #1275
Chores
🆕 New Contributors
Full Changelog : v2.1.16...v2.1.17
- ➕ Address potential XSS vector via
-
v2.1.16 Changes
December 30, 2025🔒 Security
- Attachment
hrefattributes are now validated usingDOMPurify.isValidAttribute()before rendering as anchor tags. @flavorjones
➕ Added
- 🆕 New
.editorElementsand.editorElementproperties have been added to<trix-toolbar>elements for accessing associated<trix-editor>elements. @seanpdoyle #1127 - 🔧
<trix-editor>elements can now function without an associated<input type="hidden">element when usingElementInternals. This is configured by settingwillCreateInput = falsein thebefore-trix-initializeevent and using the[name]attribute for form submissions. @seanpdoyle #1128 - Alt text can now be set on attachment preview images via
attachment.setAttributes({ alt: "..." })intrix-attachment-addevent handlers. @seanpdoyle #1198 - Attachment preview URLs can be customized using the new
setPreviewURL()andgetPreviewURL()methods onManagedAttachment, accessible from event handlers. @seanpdoyle #1210 - 💅 A new
trix-before-renderevent is dispatched before rendering, with a customizablerenderproperty for advanced use cases like morph-style rendering integration. @seanpdoyle #1252 - When no associated
<input>element is present, HTML content within<trix-editor>tags is now safely sanitized and loaded as the initial editor value. @seanpdoyle #1253
🆕 New Contributors
- @flavorjones made their first contribution in #1234
- @MatheusRich made their first contribution in #1162
Full Changelog : v2.1.15...v2.1.16
- Attachment
-
v2.1.15 Changes
May 08, 2025Full Changelog : v2.1.14...v2.1.15
🛠 Fixes GHSA-mcrw-746g-9q8h
-
v2.1.14 Changes
April 29, 2025What's Changed
- 🔒 Bump dompurify to 3.2.5 to resolve security issue by @jakeonrails in #1232
🆕 New Contributors
- 🚅 @jakeonrails made their first contribution in #1232
Full Changelog : v2.1.13...v2.1.14
-
v2.1.13 Changes
March 10, 2025What's Changed
- ➕ Add test coverage for CSP-
<style>integration by @seanpdoyle in #1199 - Correct a weird sentence in README.md by @Uaitt in #1220
- 👉 Make Trix compatible with morphing by @jorgemanrubia in #1227
🆕 New Contributors
Full Changelog : v2.1.12...v2.1.13
- ➕ Add test coverage for CSP-
-
v2.1.12 Changes
January 03, 2025What's Changed
Full changelog: v2.1.11...v2.1.12
-
v2.1.11 Changes
December 18, 2024 -
v2.1.10 Changes
December 10, 2024