Please use this topic to suggest agenda items for our weekly meetings.
This week we will be having a Community meeting, followed by the Developer meeting.
There's a Backdrop Q & A section at the end of each meeting that is open to everyone. See more information about our weekly meetings.
Comments
A topic valid for both, the community or the developer meeting:
CKEditor 4 – Backdrop policy
Backdrop 1.27 ships with CKEditor 5, additionally to v4. That CKEditor 4 is considered to be deprecated is visible on the status page, but migration is not enforced (though provided). That's good (in a way), considering that the contrib editor plugins (extensions) aren't available for v5, and there are known bugs. We might have to wait for a while to do the next step.
But I think, people need more information re that topic.
I'm convinced, Drupal perfectly shows, how things should not get handled. Turning off a module, for which their most-used version (Drupal 7) has no valid alternative seems like the worst possible publicity move.
As we handle that differently, we still have the opportunity to notify admins via Update manager, in case an actual exploit for the editor was found.
And also: in Backdrop we don't have the same precarious vendor lock-in situation like Drupal has, as TinyMCE full integration is also available. However, that's contrib and the Backdrop policy re CKEditor (core) IMO isn't clear enough, yet.
What are the questions, we need to answer? What will be our next steps and future plans? Are there any plans re v5 plugins in contrib?
Will v4 be removed from core? When? What's the current security implication, if sticking with v4? Will we be able to help people, in case a CVE re v4 gets published? Will we even know that in time?
See also this older forum post.
@indigoxela Thanks for raising these questions. The CKEditor 5 without plugins in bd-1.27.0-preview seems to work well. And for anyone who doesn't know the TinyMCE module you created for Backdrop plus some plugins is fantastic.
My understanding from some people in the Drupal only world is that the lack of compatible cke5 plugins was a real problem for them as they looked to transition from cke4 to cke5.
We got this feedback in the forum and now seems like an appropriate time to discuss this:
https://forum.backdropcms.org/forum/link-release-notes
I would like to schedule a DEV meeting sometime in the next 2-3 weeks that is focused on planning for Backdrop CMS version 2.0.
I go into this discussion with no strong feelings about when 2.0 should come or what should be in it. But, I feel like it's time to think about when we think it might happen?
What kinds of changes we expect to see in it?
When we think it is appropriate to start working on it?