Releases for CKEditor - WYSIWYG HTML editor

Security update.

SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting (XSS)

This is an important bug fixing release, which also introduces a couple of new features. Loading CKEditor from an external URL is now supported - thanks to this feature, the CKEditor module is able to load CKEditor from CDN and the manual download of CKEditor library is now optional.

Important: the <code> tag isn't protected now by default in CKEditor, in wysiwygarea. If your installation of Drupal requires this, edit ckeditor.config.js and uncomment the relevant line.

Key improvements in this release:
- Libraries API is used for CKEditor
- Better support for Drush

Full list of changes:

#1063482: Use Libraries API for CKEditor by nod_, wwalc, roderik, helior, hadsie: Use Libraries API for CKEditor
#1898294: Fatal error if Libraries module is enabled after CKEditor by kscheirer: Fatal error if Libraries module is enabled after CKEditor
#1961596: Add "feature_source" option so that ckeditor_profile component is visible in drush by jcisio: Added 'feature_source()' option so that ckeditor_profile() component is visible in Drush.
#1356026: Profile loses text formats when exported into a feature using Drush by Volx, hctom: Fixed Profile loses text formats when exported into a feature using Drush.
#1895278: WYSIWYG editor should allow Drupal to trigger 'formUpdated' event by wwalc WYSIWYG editor should allow Drupal to trigger 'formUpdated' event
#1957066: Use field_extra_fields to be able to position the "Rich text editor settings" fieldset by rudiedirkx: Use field_extra_fields to be able to position the "Rich text editor settings" fieldset
#1959754: CKFinder is not installed correctly - improve information in the status report by wwalc: CKFinder is not installed correctly - improve information in the status report
#1810910: Comments gets filtered out by ckeditor_filter_xss by mokaspar, jcisio, DeFr: Fixed Comments gets filtered out by ckeditor_filter_xss().
#1909318: Useless file inclusion in ckeditor.info by Simon Georges: Useless file inclusion in ckeditor.info.
#1603014: Modify original string for translation by anou, SebCorbin: Corrected strings used in Security section.
#1889010: Problem with CKFinder files upload when private download method is used by michal_cksource: Problem with CKFinder files upload when private download method is used
#1885950: Fix HTML validation for iframe in profile configuration. by michal_cksource: Fix HTML validation for iframe in profile configuration
#1885938: Disable div based editor on default by michal_cksource: Disable div based editor on default

Bug fixes:
#1870288: [D6] Disable plugins which not exists and are stored in ckeditor profiles
Disable plugins which not exists and are stored in ckeditor profiles
#1866704: [D6] Remove "Skin" and "Toolbar state on startup" options from user profile

New features:
#1858840: [D7] Add option to enable/disable aggregate ckeditor.js script
Add option to enable/disable aggregate ckeditor.js script
#1847662: [D7] Add support for CKEditor v4
Add support for CKEditor v4

New features:
#1489358: [D7] Add support for stylesheetparser plugin
Add support for stylesheetparser plugin
#1483402: [D7] Change security filters policy
Change security filters policy

This bug fixing release fixes just one small issue, which had to be fixed quickly, to remove incorrect error messages from the Status Report, which appeared when CKFinder was installed.

Fixed bugs:

- When CKFinder was installed, CKEditor module displayed incorrect error messages in the Status Report section of Drupal (CKEditor module was unable to find the path to CKFinder).

Security update:
Fixes SA-CONTRIB-2012-040 - (F)CKeditor XSS, arbitrary code execution.

New features:

This release fix problems caused by local repository failure during creating latest release (7.x-1.5).
#1337064: Fatal error: Call to undefined function db_fetch_object() Fix Fatal error: Call to undefined function db_fetch_object()