Skip to content

chore(deps): update @dxpr/ckeditor5-ai-agent to 1.1.2#39

Merged
jjroelofs merged 1 commit into1.xfrom
jur/1.x/update-ai-agent-plugin-1.1.2
Dec 2, 2025
Merged

chore(deps): update @dxpr/ckeditor5-ai-agent to 1.1.2#39
jjroelofs merged 1 commit into1.xfrom
jur/1.x/update-ai-agent-plugin-1.1.2

Conversation

@jjroelofs
Copy link
Copy Markdown
Contributor

Summary

Updates the CKEditor5 AI Agent plugin from 1.1.1 to 1.1.2.

Changes included in 1.1.2

  • fix(security): Filter plain text URLs in AI output (#169)
    • Extends EchoLeak mitigation (CVE-2025-32711) to handle bare URLs not wrapped in <a> tags
    • Plain text URLs replaced with EXTERNAL_URL_REDACTED unless allowlisted
  • fix: Only send providers param when using default model (#167)

Test plan

  • Verify AI Agent works correctly in CKEditor
  • Test that plain text URLs in AI output are filtered
  • Verify allowed domains pass through

Updates include:
- fix(security): filter plain text URLs in AI output (#169)
- fix: only send providers param when using default model (#167)
@jjroelofs jjroelofs merged commit 8b997ba into 1.x Dec 2, 2025
4 checks passed
@jjroelofs jjroelofs deleted the jur/1.x/update-ai-agent-plugin-1.1.2 branch December 2, 2025 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant