Not sure if you're still maintaining this but if you upload an image, insert it and then try to upload a second image it gets added to the chooser 4 or 5 times. It happens on the demo also.

Hi,

The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI

   javascript:alert%28location%29

then it works. The attacker can execute arbitrary code of his choice. Please fix this issue. Thanks

Boot Error

Something went wrong while loading config.ru

SyntaxError: ./app.rb:22: odd number list for Hash { file: "http://placehold.it/#{ht}/#{foreground}/#{background}", ^ ./app.rb:22: syntax error, unexpected ':', expecting '}' { file: "http://placehold.it/#{ht}/#{foreground}/#{background}", ^ ./app.rb:22: syntax error, unexpected ',', expecting kEND ./app.rb:23: syntax error, unexpected ',', expecting kEND ./app.rb:25: syntax error, unexpected ':', expecting '=' background: background ^ ./app.rb:29: syntax error, unexpected $end, expecting kEND

config.ru:1:in `require'
config.ru:1:in `inner_app'
/var/lib/gems/1.8/gems/rack-1.4.1/lib/rack/builder.rb:51:in `instance_eval'
/var/lib/gems/1.8/gems/rack-1.4.1/lib/rack/builder.rb:51:in `initialize'
config.ru:1:in `new'
config.ru:1:in `inner_app'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:102:in `eval'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:112:in `inner_app'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:102:in `assemble_app'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:86:in `proceed_as_child'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:31:in `call!'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/loader.rb:18:in `call'
/var/lib/gems/1.8/gems/shotgun-0.9/lib/shotgun/favicon.rb:12:in `call'
/var/lib/gems/1.8/gems/rack-1.4.1/lib/rack/builder.rb:134:in `call'
/var/lib/gems/1.8/gems/rack-1.4.1/lib/rack/handler/webrick.rb:59:in `service'
/usr/lib/ruby/1.8/webrick/httpserver.rb:104:in `service'
/usr/lib/ruby/1.8/webrick/httpserver.rb:65:in `run'
/usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread'
/usr/lib/ruby/1.8/webrick/server.rb:162:in `start'
/usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread'
/usr/lib/ruby/1.8/webrick/server.rb:95:in `start'
/usr/lib/ruby/1.8/webrick/server.rb:92:in `each'
/usr/lib/ruby/1.8/webrick/server.rb:92:in `start'
/usr/lib/ruby/1.8/webrick/server.rb:23:in `start'
/usr/lib/ruby/1.8/webrick/server.rb:82:in `start'
/var/lib/gems/1.8/gems/rack-1.4.1/lib/rack/handler/webrick.rb:13:in `run'
/var/lib/gems/1.8/gems/shotgun-0.9/bin/shotgun:156
/var/lib/gems/1.8/bin/shotgun:19:in `load'
/var/lib/gems/1.8/bin/shotgun:19