Skip to content

Commit 1e8dcde

Browse files
kemister85kemister85
authored
DOC-3364: TinyMCE 7.9.2 Documentation and Community Changelog. (#3980)
* DOC-3364: TinyMCE 7.9.2 Documentation and Community Changelog. * DOC-3364: api-version bump to TinyMCE 7.9.2.
1 parent af5ed80 commit 1e8dcde

7 files changed

Lines changed: 63 additions & 173 deletions

File tree

‎.api-version‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
7.9.1
1+
7.9.2

‎modules/ROOT/nav.adoc‎

Lines changed: 1 addition & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -419,20 +419,9 @@
419419
** xref:release-notes.adoc[Release notes for {productname}]
420420
*** {productname} 7.9.2
421421
**** xref:7.9.2-release-notes.adoc#overview[Overview]
422-
**** xref:7.9.2-release-notes.adoc#new-premium-plugin<s>[New Premium Plugin<s>]
423-
**** xref:7.9.2-release-notes.adoc#new-open-source-plugin<s>[New Open Source Plugin<s>]
424-
**** xref:7.9.2-release-notes.adoc#accompanying-premium-plugin-changes[Accompanying Premium Plugin changes]
425-
**** xref:7.9.2-release-notes.adoc#accompanying-premium-plugin-end-of-life-announcement[Accompanying Premium Plugin end-of-life announcement]
426-
**** xref:7.9.2-release-notes.adoc#accompanying-open-source-plugin-end-of-life-announcement[Accompanying Open Source Plugin end-of-life announcement]
427-
**** xref:7.9.2-release-notes.adoc#accompanying-enhanced-skins-and-icon-packs-changes[Accompanying Enhanced Skins & Icon Packs changes]
428-
**** xref:7.9.2-release-notes.adoc#improvements[Improvements]
429422
**** xref:7.9.2-release-notes.adoc#additions[Additions]
430-
**** xref:7.9.2-release-notes.adoc#changes[Changes]
431-
**** xref:7.9.2-release-notes.adoc#removed[Removed]
432-
**** xref:7.9.2-release-notes.adoc#bug-fixes[Bug fixes]
433-
**** xref:7.9.2-release-notes.adoc#security-fixes[Security fixes]
434423
**** xref:7.9.2-release-notes.adoc#deprecated[Deprecated]
435-
**** xref:7.9.2-release-notes.adoc#known-issues[Known issues]
424+
**** xref:7.9.2-release-notes.adoc#security-fixes[Security fixes]
436425
*** {productname} 7.9.0
437426
**** xref:7.9.0-release-notes.adoc#overview[Overview]
438427
**** xref:7.9.0-release-notes.adoc#accompanying-premium-self-hosted-server-side-component-changes[Accompanying Premium self-hosted server-side component changes]

‎modules/ROOT/pages/7.9.2-release-notes.adoc‎

Lines changed: 21 additions & 157 deletions
Original file line numberDiff line numberDiff line change
@@ -11,185 +11,49 @@ include::partial$misc/admon-releasenotes-for-stable.adoc[]
1111
[[overview]]
1212
== Overview
1313

14-
{productname} {release-version} was released for {enterpriseversion} and {cloudname} on Monday, November 2^nd^, 2026. These release notes provide an overview of the changes for {productname} {release-version}, including:
15-
16-
// Remove sections and section boilerplates as necessary.
17-
// Pluralise as necessary or remove the placeholder plural marker.
18-
* xref:new-premium-plugin<s>[New Premium plugin<s>]
19-
* xref:new-open-source-plugin<s>[New Open Source plugin<s>]
20-
* xref:accompanying-premium-plugin-changes[Accompanying Premium plugin changes]
21-
* xref:accompanying-premium-plugin-end-of-life-announcement[Accompanying Premium plugin end-of-life announcement]
22-
* xref:accompanying-open-source-plugin-end-of-life-announcement[Accompanying open source plugin end-of-life announcement]
23-
* xref:accompanying-enhanced-skins-and-icon-packs-changes[Accompanying Enhanced Skins & Icon Packs changes]
24-
* xref:improvements[Improvements]
14+
{productname} {release-version} was released for {enterpriseversion} and {cloudname} on Wednesday, February 11^th^, 2026. These release notes provide an overview of the changes for {productname} {release-version}, including:
15+
2516
* xref:additions[Additions]
26-
* xref:changes[Changes]
27-
* xref:bug-fixes[Bug fixes]
28-
* xref:security-fixes[Security fixes]
2917
* xref:deprecated[Deprecated]
30-
* xref:known-issues[Known issues]
31-
32-
33-
[[new-premium-plugin<s>]]
34-
== New Premium plugin<s>
35-
36-
The following new Premium plugin was released alongside {productname} {release-version}.
37-
38-
=== <Premium plugin name>
39-
40-
The new Premium plugin, **<Premium plugin name>** // description here.
41-
42-
For information on the **<Premium plugin name>** plugin, see xref:<plugincode>.adoc[<Premium plugin name>].
43-
44-
45-
[[new-open-source-plugin]]
46-
== New Open Source plugin
47-
48-
The following new Open Source plugin was released alongside {productname} {release-version}.
49-
50-
=== <Open source plugin name>
51-
52-
The new open source plugin, **<Open source plugin name>** // description here.
53-
54-
For information on the **<Open source plugin name>** plugin, see xref:<plugincode>.adoc[<Open source plugin name>].
55-
56-
57-
[[accompanying-premium-plugin-changes]]
58-
== Accompanying Premium plugin changes
59-
60-
The following premium plugin updates were released alongside {productname} {release-version}.
61-
62-
=== <Premium plugin name 1> <Premium plugin name 1 version>
63-
64-
The {productname} {release-version} release includes an accompanying release of the **<Premium plugin name 1>** premium plugin.
65-
66-
**<Premium plugin name 1>** <Premium plugin name 1 version> includes the following <fixes, changes, improvements>.
67-
68-
==== <Premium plugin name 1 change 1>
69-
70-
// CCFR here.
71-
72-
For information on the **<Premium plugin name 1>** plugin, see: xref:<plugincode>.adoc[<Premium plugin name 1>].
73-
74-
75-
[[accompanying-premium-plugin-end-of-life-announcement]]
76-
== Accompanying Premium plugin end-of-life announcement
77-
78-
The following Premium plugin has been announced as reaching its end-of-life:
79-
80-
=== <Premium plugin name eol>
81-
82-
{productname}'s xref:<plugincode>.adoc[<Premium plugin name eol>] plugin will be deactivated on <month> <DD>, <YYYY>, and is no longer available for purchase.
83-
84-
85-
[[accompanying-open-source-plugin-end-of-life-announcement]]
86-
== Accompanying open source plugin end-of-life announcement
87-
88-
The following open source plugin has been announced as reaching its end-of-life:
89-
90-
=== <Open source plugin name eol>
91-
92-
{productname}'s xref:<plugincode>.adoc[<Open source plugin name eol>] plugin will be deactivated on <month> <DD>, <YYYY>, and is no longer available for purchase.
93-
94-
95-
[[accompanying-enhanced-skins-and-icon-packs-changes]]
96-
== Accompanying Enhanced Skins & Icon Packs changes
97-
98-
The {productname} {release-version} release includes an accompanying release of the **Enhanced Skins & Icon Packs**.
99-
100-
=== Enhanced Skins & Icon Packs
101-
102-
The **Enhanced Skins & Icon Packs** release includes the following updates:
103-
104-
The **Enhanced Skins & Icon Packs** were rebuilt to pull in the changes also incorporated into the default {productname} {release-version} skin, Oxide.
105-
106-
For information on using Enhanced Skins & Icon Packs, see: xref:enhanced-skins-and-icon-packs.adoc[Enhanced Skins & Icon Packs].
107-
108-
109-
[[improvements]]
110-
== Improvements
111-
112-
{productname} {release-version} also includes the following improvement<s>:
113-
114-
=== <TINY-vwxyz 1 changelog entry>
115-
// #TINY-vwxyz1
116-
117-
// CCFR here.
18+
* xref:security-fixes[Security fixes]
11819

11920

12021
[[additions]]
12122
== Additions
12223

123-
{productname} {release-version} also includes the following addition<s>:
124-
125-
=== <TINY-vwxyz 1 changelog entry>
126-
// #TINY-vwxyz1
127-
128-
// CCFR here.
129-
130-
131-
[[changes]]
132-
== Changes
133-
134-
{productname} {release-version} also includes the following change<s>:
24+
{productname} {release-version} also includes the following addition:
13525

136-
=== <TINY-vwxyz 1 changelog entry>
137-
// #TINY-vwxyz1
26+
=== Introduced `allow_html_in_comments` option
13827

139-
// CCFR here.
28+
Introduced `allow_html_in_comments` option (boolean, default: `true`) to control handling of HTML-like syntax in comment nodes. This option will default to `false` in TinyMCE 8.x.
14029

30+
For information on the `allow_html_in_comments` option, see: xref:content-filtering.adoc#allow-html-in-comments[allow_html_in_comments].
14131

142-
[[removed]]
143-
== Removed
14432

145-
{productname} {release-version} also includes the following removal<s>:
146-
147-
=== <TINY-vwxyz 1 changelog entry>
148-
// #TINY-vwxyz1
149-
150-
// CCFR here.
151-
152-
153-
[[bug-fixes]]
154-
== Bug fixes
33+
[[deprecated]]
34+
== Deprecated
15535

156-
{productname} {release-version} also includes the following bug fix<es>:
36+
{productname} {release-version} includes the following deprecation:
15737

158-
=== <TINY-vwxyz 1 changelog entry>
159-
// #TINY-vwxyz1
38+
=== The default value of `allow_html_in_comments` will change in TinyMCE 8.x
16039

161-
// CCFR here.
40+
The default value of `allow_html_in_comments` will change from `true` to `false` in TinyMCE 8.x.
16241

16342

16443
[[security-fixes]]
16544
== Security fixes
16645

167-
{productname} {release-version} includes <a fix | fixes for the following security issue<s>:
168-
169-
=== <TINY-vwxyz 1 changelog entry>
170-
// #TINY-vwxyz1
171-
172-
// CCFR here.
173-
174-
175-
[[deprecated]]
176-
== Deprecated
177-
178-
{productname} {release-version} includes the following deprecation<s>:
179-
180-
=== The `<plugin>` configuration property, `<name>`, has been deprecated
181-
182-
// placeholder here.
183-
46+
{productname} {release-version} includes fixes for the following security issues:
18447

185-
[[known-issues]]
186-
== Known issues
48+
=== Enhanced content sanitization
18749

188-
This section describes issues that users of {productname} {release-version} may encounter and possible workarounds for these issues.
50+
Updated dependencies and parsing logic for enhanced content sanitization. HTML-like content in comments and certain legacy patterns are now sanitized more strictly when `xss_sanitization` is enabled (default). The introduced `allow_html_in_comments` option provides control over comment node sanitization behavior.
18951

190-
There <is one | are <number> known issue<s> in {productname} {release-version}.
52+
For information on content sanitization, see: xref:security.adoc#sanitizing-html-input-to-protect-against-xss-attacks[Sanitizing HTML input to protect against XSS attacks].
19153

192-
=== <TINY-vwxyz 1 changelog entry>
193-
// #TINY-vwxyz1
54+
[IMPORTANT]
55+
====
56+
**Migration:** Legacy content using HTML comment wrappers in script or style tags should be updated to use modern syntax without comment wrappers. These comment patterns were primarily used for compatibility with browsers from the 1990s and are not required by modern browsers.
19457
195-
// CCFR here.
58+
**Workaround:** To temporarily preserve existing content during migration, set `xss_sanitization: false`, though this is **not recommended** for production environments due to security implications.
59+
====

‎modules/ROOT/pages/changelog.adoc‎

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,19 @@
44

55
NOTE: This is the {productname} Community version changelog. For information about the latest {cloudname} or {enterpriseversion} Release, see: xref:release-notes.adoc[{productname} Release Notes].
66

7-
== xref:7.9.2-release-notes.adoc[7.9.2 - 2026-11-02]
7+
== xref:7.9.2-release-notes.adoc[7.9.2 - 2026-02-11]
88

9-
//TODO
9+
=== Deprecated
10+
11+
* The default value of `allow_html_in_comments` will change from `true` to `false` in TinyMCE 8.x.
12+
// #TINY-11900
13+
14+
=== Security
15+
16+
* Updated dependencies and parsing logic for enhanced content sanitization. HTML-like content in comments and certain legacy patterns are now sanitized more strictly when `xss_sanitization` is enabled (default). The introduced `allow_html_in_comments` option provides control over comment node sanitization behavior.
17+
// #TINY-11900
18+
* Introduced `allow_html_in_comments` option (boolean, default: `true`) to control handling of HTML-like syntax in comment nodes. This option will default to `false` in TinyMCE 8.x.
19+
// #TINY-11900
1020

1121
== 7.9.1 - 2025-05-29
1222

‎modules/ROOT/pages/content-filtering.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,8 @@ include::partial$configuration/allow_conditional_comments.adoc[]
77

88
include::partial$configuration/allow_html_in_named_anchor.adoc[]
99

10+
include::partial$configuration/allow_html_in_comments.adoc[]
11+
1012
include::partial$configuration/allow_mathml_annotation_encodings.adoc[]
1113

1214
include::partial$configuration/allow_unsafe_link_target.adoc[]

‎modules/ROOT/partials/configuration/allow_html_in_comments.adoc‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
[[allow-html-in-comments]]
2+
== `+allow_html_in_comments+`
3+
4+
This option controls whether HTML-like syntax in comment nodes is allowed during content sanitization. When set to `false`, HTML-like content in comment nodes will be sanitized more strictly.
5+
6+
*Type:* `+Boolean+`
7+
8+
*Default value:* `+true+`
9+
10+
*Possible values:* `+true+`, `+false+`
11+
12+
[NOTE]
13+
====
14+
This option will default to `false` in {productname} 8.x.
15+
====
16+
17+
=== Example: using `+allow_html_in_comments+`
18+
19+
[source,js]
20+
----
21+
tinymce.init({
22+
selector: 'textarea', // change this value according to your HTML
23+
allow_html_in_comments: false
24+
});
25+
----

‎modules/ROOT/partials/misc/supported-versions.adoc‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ Supported versions of {productname}:
66
[cols="^,^,^",options="header"]
77
|===
88
|Version |Release Date |End of Premium Support
9-
|7.9.2 |2026-11-02 |2027-11-02
9+
|7.9.2 |2026-02-11 |2027-02-11
1010
|7.9 |2025-05-14 |2026-11-14
1111
|7.8 |2025-04-09 |2026-10-09
1212
|7.7 |2025-02-20 |2026-08-20

0 commit comments

Comments
 (0)