TinyMCE 6.3.2

These are the Tiny Cloud and TinyMCE Enterprise release notes. For information on the latest community version of TinyMCE, see the TinyMCE Changelog.


TinyMCE 6.3.2 was released for TinyMCE Enterprise and Tiny Cloud on Wednesday, March 1st, 2023. It includes TinyMCE 6.3.2. These release notes provide an overview of the changes for TinyMCE 6.3.2:

Accompanying Premium self-hosted server-side component changes

The TinyMCE 6.3.2 release includes accompanying changes affecting the TinyMCE self-hosted services for the following plugins:

  • Enhanced Media Embed plugin (mediaembed)

  • Export plugin (export)

  • Enhanced Image Editing plugin (editimage)

  • Link Checker plugin (linkchecker)

  • Spell Checker Pro plugin (tinymcespellchecker)

  • Spelling Autocorrect plugin (autocorrect)

For information on:

The Java server-side components have been updated to the following versions:

  • ephox-hyperlinking.war: 2.105.14

  • ephox-image-proxy.war: 2.106.5

  • ephox-spelling.war: 2.118.7

Updating the self-hosted server-side components

The new versions of the server-side services provide updates for the Java-based server-side components. To deploy the updated version of the server-side components:

  1. Update your Java Application Server to the minimum required version:

    • Eclipse Jetty:

      • 9.4+

    • WebSphere Application Server (WAS) 8 or later

    • Apache Tomcat:

      • 10 (See note below)

      • 9+

      • 8.5.12+

      • 8.0.42+

      • 7.0.76+

      Tomcat 10 will require WAR files to be placed in the webapp-javaee directory rather than the webapps directory due to the change to Jakarta servlets. Jetty 11 is not currently supported due to this change.
  2. Replace the existing server-side .war files with the .war files bundled with TinyMCE 6.3.2 or later.

For information on:

There are no functionality changes in these updated server-side components.

Bug fix

TinyMCE 6.3.2 also includes the following bug fix:

Removed a workaround for ensuring stylesheets are loaded in an outdated version of webkit

In certain webkit browsers the onload event wasn’t supported due to an old bug within TinyMCE. A workaround was implemented that manually checked that stylesheets were being loaded rather than relying on the event being triggered. Due to this bug, a fixed was applied to the onload event, to ensure that it is now supported by webkit.

The previous workaround has now been removed and replaced with the native browser event.

In TinyMCE 6.3, the onload event error that stopped stylesheets to load have now been fixed with the new native browser implementation.

Security fixes

TinyMCE 6.3.2 includes fixes for the following security issues:

All 3 server-side components have been updated to include dependency updates addressing the following security issues.

This update includes both Medium and High severity vulnerability fixes.

For information on the server-side components updates, see: Accompanying Premium self-hosted server-side component changes.

There are no functionality changes in these updated server-side components.