FCKeditor / CKeditor Upgrade Question

[dbreyley]

One of our clients had run a security vulnerability assessment, one of the items returned was that FCKeditor was outdated.

Our client is wanting us to upgrade the editor.

It is possible to just manually update the editor or is there something compiled in AbleCommerce that references the version?

[Katie]

Ok, I'll tell you what I know about this, which isn't a lot. First of all, back in 2011, our dev team spent at least a day implementing the newer CKeditor for AbleCommerce 7.0.7. The project was eventually abandoned, because we found the newer editor was lacking an important feature (ability to insert images) and also resulted in a security error when editing the html ("A potentially dangerous request...").

From what I can tell, if you wanted to go ahead with the update, there would need to be changes to the HTMLEditor Control under Web.UI project. I also found another post which relates to securing the FCKeditor folder. It may or may not help, but I thought you might be interested anyway - viewtopic.php?f=42&t=17537

Now we are using TinyMCE with AbleCommerce Gold.