Replace TinyMCE 4.2.8 with a small local editor.

TinyMCE 4.2.8 has known XSS bugs. publish/editor.js has the same toolbar and writes the same HTML. The textarea still posts the story.
2026-09-25 22:58:05 +02:00
parent aee8a830d7
commit a9daa6a792
116 changed files with 1371 additions and 5862 deletions
@@ -17,7 +17,7 @@ require_once("../session.lib.php");
    <link rel='stylesheet' type='text/css' href='../publish/style.css' />
    <script type="text/javascript" src="../utilities.js"></script>
    <link rel="alternate" type="application/rss+xml" title="xxx.org.za RSS feed" href="/feed" />
-<?php include_once('tinymce_init.inc.php'); ?>
+<?php include_once('./editor.inc.php'); ?>
 <?php if (!$is_admin ) { ?>
    <?= captcha_script() ?>
 <?php } ?>