starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

[PR #4349] [MERGED] Update rich text editor to prevent pasting in images from the browser #4219

New Issue
Closed
opened 2026-04-25 00:18:51 +02:00 by adam · 0 comments
adam commented 2026-04-25 00:18:51 +02:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/advplyr/audiobookshelf/pull/4349
Author: @advplyr
Created: 5/30/2025
Status: ✅ Merged
Merged: 5/30/2025
Merged by: @advplyr

Base: master ← Head: trix_prevent_attachments

📝 Commits (1)

  • 0c8e334 Update rich text editor to prevent pasting in images from the browser

📊 Changes

1 file changed (+7 additions, -1 deletions)

View changed files

📝 client/components/ui/VueTrix.vue (+7 -1)

📄 Description

Brief summary

Disable the ability to paste images into the rich text editor

Which issue is fixed?

No issue, discussed in Discord

In-depth Description

Trix editor by default allows for pasting in image files that are copied from a browser. This is a potential security issue since the URL of the image is included.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/advplyr/audiobookshelf/pull/4349 **Author:** [@advplyr](https://github.com/advplyr) **Created:** 5/30/2025 **Status:** ✅ Merged **Merged:** 5/30/2025 **Merged by:** [@advplyr](https://github.com/advplyr) **Base:** `master` ← **Head:** `trix_prevent_attachments` --- ### 📝 Commits (1) - [`0c8e334`](https://github.com/advplyr/audiobookshelf/commit/0c8e334b1a77c13bc97ea9e9775f0fd132cce212) Update rich text editor to prevent pasting in images from the browser ### 📊 Changes **1 file changed** (+7 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `client/components/ui/VueTrix.vue` (+7 -1) </details> ### 📄 Description <!-- For Work In Progress Pull Requests, please use the Draft PR feature, see https://github.blog/2019-02-14-introducing-draft-pull-requests/ for further details. If you do not follow this template, the PR may be closed without review. Please ensure all checks pass. If you are a new contributor, the workflows will need to be manually approved before they run. --> ## Brief summary Disable the ability to paste images into the rich text editor ## Which issue is fixed? No issue, discussed in Discord ## In-depth Description Trix editor by default allows for pasting in image files that are copied from a browser. This is a potential security issue since the URL of the image is included. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2026-04-25 00:18:51 +02:00
adam closed this issue 2026-04-25 00:18:51 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#4219
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?