# Is anyone still using the legacy email and page builder?

**URL:** <https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819>\
**Category:** General Discussion\
**Tags:** development\
**Created:** [April 26, 2023, 12:25pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819 "2023-04-26T12:25:47Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![escopecz](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/escopecz/32/370_2.png) [@escopecz](https://forum.mautic.org/u/escopecz)\
**Post date:** [April 26, 2023, 12:25pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/1 "2023-04-26T12:25:47Z")

</div>

I’m in the process of updating JS dependencies of Mautic and I found that we are still loading the Froala editor. This WYSIWYG editor was replaced with CK editor 2 years ago:

> <https://github.com/mautic/mautic/pull/9843>
>
> | Q | A
> | --------------------------------…------ | ---
> | Branch? | "features" 
> | Bug fix? | no
> | New feature? | yes
> | Deprecations? | yes
> | BC breaks? | no
> | Automated tests included? | yes
> | Related user documentation PR URL | n/a
> | Related developer documentation PR URL | n/a
> | Issue(s) addressed | n/a
> 
> \#### Description:
> 
> We've been locked into a very old version of Froala with no upgrade path due to Froala changing their licensing years ago. Thus, this PR replaces Froala with CKEditor 4 everywhere except for the the legacy builder since that is being replaced with Grapesjs. Froala's code will be removed once the legacy builder's code is removed. 
> 
> \#### Steps to test this PR:
> 1. Load up \[this PR\](https://mautibox.com)
> 2. Create new Dynamic Web Content. CKEditor should be loaded and usable. 
> 3. Similarly use the different areas in the product that require a WYSIWYG editor (descriptions, etc).
> 3. Use the legacy builder to build an email or landing page which should still be usable with Froala. 
> 
> \#### Deprecations
> Froala is on its way out so nothing new should be dependent on it.

But it was kept in the code as it’s used in the legacy email and page builder that was in use before the GrapeJS editor.

The main problem with Froala editor is that we are not able to update it. We used to have a deal with the authors of this editor that we can use it in the open source project but this is no longer the case so we are not able to get updated version and cannot ensure security patches.

So I’m wondering if we can remove the legacy builder together with the Froala editor in Mautic 5.

---

<div class="post-metadata">

**Author:** ![Yosu\_Cadilla](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/yosu_cadilla/32/6206_2.png) [@Yosu\_Cadilla](https://forum.mautic.org/u/Yosu_Cadilla)\
**Post date:** [April 26, 2023, 2:09pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/2 "2023-04-26T14:09:13Z")

</div>

I know for a fact that some companies are still using the old builder, since they have invested some time and money to build themes.  
That said…  
The cost of migrating any custom emails is usually low, so I think it could be removed without any major negative impact.

Plus, what are the options/alternatives @escopecz?

Like @Norman Pracht said in Slack:  
If we have to consider removing it, then I would rather go for a Community survey to be sure if it used or not (we could use this process anytime we have the question).

---

<div class="post-metadata">

**Author:** ![escopecz](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/escopecz/32/370_2.png) [@escopecz](https://forum.mautic.org/u/escopecz)\
**Post date:** [April 26, 2023, 3:25pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/3 "2023-04-26T15:25:40Z")

</div>

> [@Yosu\_Cadilla](#):
>
> Plus, what are the options/alternatives @escopecz?

I like the thinking of Zdeno @kuzmany :

> We count with remove the legacy builder in the next major release. Probably the best way would get back Code Mode editor and migrate all legacy builder content to Code Mode. We knows some HTML content from legacy builder is broken in Grapes JS, email and page as well.

The Code Mode builder was removed and I don’t yet understand why. But if we’ll be able to get it back and open emails and pages that do not support the new builder in the Code Mode builder then the users will have a way to edit old emails and pages.

> [@Yosu\_Cadilla](#):
>
> go for a Community survey

How do I do that? I thought that Norman meant a Forum post similar to this one where we can see the community members react. Is there such a thing as Community survey? If so, can someone help me set it up and put it in front of the wider audience?

---

<div class="post-metadata">

**Author:** ![Yosu\_Cadilla](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/yosu_cadilla/32/6206_2.png) [@Yosu\_Cadilla](https://forum.mautic.org/u/Yosu_Cadilla)\
**Post date:** [April 26, 2023, 7:00pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/4 "2023-04-26T19:00:35Z")

</div>

Oh!, sorry, I thought it was a “thing” already.  
Let me talk to @silavapi, see if we can define “Community survey” and also get it done for you.  
We will just need the text for the question (I guess the same as you already posted initially on Slack) and we will run it for you and get back to you with the response.

---

<div class="post-metadata">

**Author:** ![Yosu\_Cadilla](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/yosu_cadilla/32/6206_2.png) [@Yosu\_Cadilla](https://forum.mautic.org/u/Yosu_Cadilla)\
**Post date:** [April 27, 2023, 11:36am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/5 "2023-04-27T11:36:20Z")

</div>

Or maybe not…

---

<div class="post-metadata">

**Author:** ![IonutOjicaDe](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ionutojicade/32/7383_2.png) [@IonutOjicaDe](https://forum.mautic.org/u/IonutOjicaDe)\
**Post date:** [April 28, 2023, 2:24pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/6 "2023-04-28T14:24:14Z")

</div>

Am I wrong by saying that the integration of the new CKEditor (GrapeJS) has many bugs?

I mean, one bug that I was facing many times was that the email content was not saved, even if I clicked Save. By opening the email again, my last changes were not there.  
It was Mautic 4.2.something, installed on VPS, with php 7.4.something and MySQL 10.3… .

There were some other bugs too (the link attribute in emails: mautic:disable-tracking=“true” did not work either - it was removed every time by the editor), and I decided to change to classic editor.

Unfortunately, the classic editor is also not bug free and I am not as happy as I wished. Still, the emails are all saved, and this I find very important.

I do not have a solution. I am willing to test again the CKEditor, to proof if the saving problem is still there.

---

<div class="post-metadata">

**Author:** ![escopecz](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/escopecz/32/370_2.png) [@escopecz](https://forum.mautic.org/u/escopecz)\
**Post date:** [April 28, 2023, 3:39pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/7 "2023-04-28T15:39:52Z")

</div>

That’s exactly the reason why I’m asking. I haven’t used the GrapeJS builder much myself. I know that some features like dynamic content or gated video weren’t built in. Maybe they are now. I appreciate any feedback from the marketers actually using it. If a substantial part of users are still using the legacy builder then we should keep it in M5 too.

---

<div class="post-metadata">

**Author:** ![IonutOjicaDe](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ionutojicade/32/7383_2.png) [@IonutOjicaDe](https://forum.mautic.org/u/IonutOjicaDe)\
**Post date:** [April 29, 2023, 1:51pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/8 "2023-04-29T13:51:13Z")

</div>

I have many questions open regarding the actual editors:

1. what are the specifications? what should [the editor in Mautic] can? Are the specifications anywhere defined?
2. if first point is clear, are defined what are the main criteria for an [editor for Mautic] to be chosen.

According to Froala license, it is not allowed the editor to be used in open source projects. So there is no need to contact Froala. This means… no Froala anymore, but GrapesJS.

PS: CKEditor is the most used open-source HTML-Editor according to [GitHub](https://github.com/topics/html-editor).

---

<div class="post-metadata">

**Author:** ![astrylis](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/astrylis/32/6421_2.png) [@astrylis](https://forum.mautic.org/u/astrylis)\
**Post date:** [May 1, 2023, 8:06am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/9 "2023-05-01T08:06:32Z")

</div>

We use the grapejs builder with ckeditor. It was a bit of a hassle when we upgraded from v3 to v4. There was some copy paste bug that popped up and a couple other bugs. Let me find our PR for it to see what changes we made and I could perhaps get a PR in for it on v5.

I just had a look at our PR, there is a lot of changes, 13 files in total all in the GrapesJsBundle.  
@escopecz I can push up a PR for you to take a look if you like?

---

<div class="post-metadata">

**Author:** ![escopecz](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/escopecz/32/370_2.png) [@escopecz](https://forum.mautic.org/u/escopecz)\
**Post date:** [May 3, 2023, 11:18am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/10 "2023-05-03T11:18:24Z")

</div>

> [@astrylis](#):
>
> I can push up a PR for you to take a look if you like?

Yes please! It’s a pain point for the whole community.

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [May 3, 2023, 3:00pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/11 "2023-05-03T15:00:53Z")

</div>

I would be very happy to test if you can make the PR!  
I’m excited about any update to the GrapesJs builder.  
Joey

---

<div class="post-metadata">

**Author:** ![astrylis](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/astrylis/32/6421_2.png) [@astrylis](https://forum.mautic.org/u/astrylis)\
**Post date:** [May 3, 2023, 3:11pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/12 "2023-05-03T15:11:37Z")

</div>

I’ll get that pushed up either tonight or tomorrrow 🙂

---

<div class="post-metadata">

**Author:** ![ekke](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ekke/32/296_2.png) [@ekke](https://forum.mautic.org/u/ekke)\
**Post date:** [May 24, 2023, 3:42pm UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/13 "2023-05-24T15:42:20Z")

</div>

@escopecz I only now stumbled upon this topic… First of all: Has there been a resolution to your original question already?

My 0,02$:

- I can confirm that there is serious usage out there of the legacy builder
- And yes, we should force them over eventually - we cannot carry that legacy with us forever
- This would indeed require the GrapesJS builder to work sufficiently well
- Also, a much longer notice would be the professional way to go

Thus, suggestion:

1. We try to find a solution for using Froala another bit. Maybe with crowdfunding from those who desire using it.
2. With the release of M5 we clearly state that this is the last version to support the legacy builder.

If all goes wrong, another option would be to offer the **Legacy builder as a paid add-on** for those who still need it. This way we ensure funding of the license (and the effort involved) and maybe even earn some money for the good cause.

---

<div class="post-metadata">

**Author:** ![escopecz](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/escopecz/32/370_2.png) [@escopecz](https://forum.mautic.org/u/escopecz)\
**Post date:** [May 25, 2023, 8:21am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/14 "2023-05-25T08:21:28Z")

</div>

Thanks for commenting with constructive ideas!

Why do we need to get rid of Froala ASAP?

1. Licensing. AFAIK David purchased the OEM license as it allowed us to use it in an open source project. They no longer provide this option but it’s visible here:  
[Pricing Plans | WYSIWYG HTML Editor | Froala](https://web.archive.org/web/20160919233659/https://www.froala.com/wysiwyg-editor/pricing)
2. This basically means we are stuck with the very old Froala version and the bad news is that it has several known vulnerabilities:  
[froala-editor 2.4.2 vulnerabilities | Snyk](https://security.snyk.io/package/npm/froala-editor/2.4.2)

So basically if we want to still have it in Mautic 5 core then we agree with having security vulnerabilities there.

So I think we should move it out of the core for M5 and make a plugin out of it. However, that would require resources that we don’t have (if anyone wants to get their hands dirty and get this done, please do!). So the next best option is to at least stop loading the Froala editor assets if the GrapeJS plugin is enabled. Since it is enabled by default we ensure that the security vulnerabilities are not present in fresh Mautic installation.

Of course the best option would be to improve the GrapeJS builder so it’s a no-brainer that that’s the builder to use so we can remove the legacy builder completely. It seems that’s not an option for M5. Hopefully we’ll get there for M6.

---

<div class="post-metadata">

**Author:** ![mikew](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mikew/32/5156_2.png) [@mikew](https://forum.mautic.org/u/mikew)\
**Post date:** [May 25, 2023, 8:44am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/15 "2023-05-25T08:44:13Z")

</div>

Hi,

Was this PR released? If so is there a link where I can also go and test it

---

<div class="post-metadata">

**Author:** ![astrylis](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/astrylis/32/6421_2.png) [@astrylis](https://forum.mautic.org/u/astrylis)\
**Post date:** [May 25, 2023, 8:57am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/16 "2023-05-25T08:57:37Z")

</div>

there is a draft PR, I just need to fix it up and rebase it to 5.x.

The draft will include the upgraded ckEditor and added folder support for assets in grapesjs which should help with asset loading times

---

<div class="post-metadata">

**Author:** ![mikew](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mikew/32/5156_2.png) [@mikew](https://forum.mautic.org/u/mikew)\
**Post date:** [May 25, 2023, 9:47am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/17 "2023-05-25T09:47:32Z")

</div>

would the PR be good for 4.x ? I am not sure how many people are running on 5 in production at the moment. if so would be happy to look at the draft and try it out

---

<div class="post-metadata">

**Author:** ![astrylis](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/astrylis/32/6421_2.png) [@astrylis](https://forum.mautic.org/u/astrylis)\
**Post date:** [May 25, 2023, 9:58am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/18 "2023-05-25T09:58:47Z")

</div>

Yeah I am currently on 4 myself, let me sort it out first as it’s quite large, and I’ll ping you when it’s ready. I intend to work on it this evening

---

<div class="post-metadata">

**Author:** ![ekke](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ekke/32/296_2.png) [@ekke](https://forum.mautic.org/u/ekke)\
**Post date:** [May 25, 2023, 10:00am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/19 "2023-05-25T10:00:20Z")

</div>

ok, do you think loading those assets could trigger something bad? Afterall, all vulnerabilities seem to be XSS and thus only apply in situations where an editor is actually using Froala, no?

So maybe all we need to do is communicate well - like putting a red sticker into the legacy builder that says “This is insecure, please switch to GrapesJS” 😃

And I like the external plugin idea a lot, maybe THAT could be combined with a paid license (paid to Froala, but also paid by the users). Still there would have to be enough serious interest in that, and someone willing to do it.

---

<div class="post-metadata">

**Author:** ![mikew](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mikew/32/5156_2.png) [@mikew](https://forum.mautic.org/u/mikew)\
**Post date:** [May 25, 2023, 10:23am UTC](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819/20 "2023-05-25T10:23:02Z")

</div>

Thanks @astrylis - if you need any testing let me know

[Next page](https://forum.mautic.org/t/is-anyone-still-using-the-legacy-email-and-page-builder/27819.md?page=2)
