11 files changed, 237 insertions, 88 deletions

diff --git a/sources/core/dom/document.js b/sources/core/dom/document.js
index 51c5b19..ebf0bab 100644
--- a/sources/core/dom/document.js
+++ b/sources/core/dom/document.js
@@ -262,7 +262,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.document.prototype, {
          * @param {String} html The HTML defining the document content.
          */
         write: function( html ) {
-                // Don't leave any history log in IE. (#5657)
+                // Don't leave any history log in IE. (http://dev.ckeditor.com/ticket/5657)
                 this.$.open( 'text/html', 'replace' );
 
                 // Support for custom document.domain in IE.
diff --git a/sources/core/dom/domobject.js b/sources/core/dom/domobject.js
index 4c593ff..f4e258a 100644
--- a/sources/core/dom/domobject.js
+++ b/sources/core/dom/domobject.js
@@ -41,7 +41,7 @@ CKEDITOR.dom.domObject.prototype = ( function() {
                         return function( domEvent ) {
                                 // In FF, when reloading the page with the editor focused, it may
                                 // throw an error because the CKEDITOR global is not anymore
-                                // available. So, we check it here first. (#2923)
+                                // available. So, we check it here first. (http://dev.ckeditor.com/ticket/2923)
                                 if ( typeof CKEDITOR != 'undefined' )
                                         domObject.fire( eventName, new CKEDITOR.dom.event( domEvent ) );
                         };
@@ -138,7 +138,7 @@ CKEDITOR.dom.domObject.prototype = ( function() {
                         }
 
                         // Remove events from events object so fire() method will not call
-                        // listeners (#11400).
+                        // listeners (http://dev.ckeditor.com/ticket/11400).
                         CKEDITOR.event.prototype.removeAllListeners.call( this );
                 }
         };
diff --git a/sources/core/dom/element.js b/sources/core/dom/element.js
index e02ff17..31451f9 100644
--- a/sources/core/dom/element.js
+++ b/sources/core/dom/element.js
@@ -308,7 +308,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                  */
                 appendText: function( text ) {
                         // On IE8 it is impossible to append node to script tag, so we use its text.
-                        // On the contrary, on Safari the text property is unpredictable in links. (#13232)
+                        // On the contrary, on Safari the text property is unpredictable in links. (http://dev.ckeditor.com/ticket/13232)
                         if ( this.$.text != null && CKEDITOR.env.ie && CKEDITOR.env.version < 9 )
                                 this.$.text += text;
                         else
@@ -377,7 +377,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
 
                         // In case of Internet Explorer, we must check if there is no background-color
                         // added to the element. In such case, we have to overwrite it to prevent "switching it off"
-                        // by a browser (#14667).
+                        // by a browser (http://dev.ckeditor.com/ticket/14667).
                         if ( CKEDITOR.env.ie && !CKEDITOR.env.edge ) {
                                 tmpElement = new CKEDITOR.dom.element( 'div' );
 
@@ -452,7 +452,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                  */
                 getHtml: function() {
                         var retval = this.$.innerHTML;
-                        // Strip <?xml:namespace> tags in IE. (#3341).
+                        // Strip <?xml:namespace> tags in IE. (http://dev.ckeditor.com/ticket/3341).
                         return CKEDITOR.env.ie ? retval.replace( /<\?[^>]*>/g, '' ) : retval;
                 },
 
@@ -467,7 +467,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                 getOuterHtml: function() {
                         if ( this.$.outerHTML ) {
                                 // IE includes the <?xml:namespace> tag in the outerHTML of
-                                // namespaced element. So, we must strip it here. (#3341)
+                                // namespaced element. So, we must strip it here. (http://dev.ckeditor.com/ticket/3341)
                                 return this.$.outerHTML.replace( /<\?[^>]*>/, '' );
                         }
 
@@ -618,7 +618,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                                         return this.$[ name ];
 
                                                 case 'style':
-                                                        // IE does not return inline styles via getAttribute(). See #2947.
+                                                        // IE does not return inline styles via getAttribute(). See http://dev.ckeditor.com/ticket/2947.
                                                         return this.$.style.cssText;
 
                                                 case 'contenteditable':
@@ -679,7 +679,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                 function( propertyName ) {
                                         var style = this.getWindow().$.getComputedStyle( this.$, null );
 
-                                        // Firefox may return null if we call the above on a hidden iframe. (#9117)
+                                        // Firefox may return null if we call the above on a hidden iframe. (http://dev.ckeditor.com/ticket/9117)
                                         return style ? style.getPropertyValue( propertyName ) : '';
                                 } : function( propertyName ) {
                                         return this.$.currentStyle[ CKEDITOR.tools.cssStyleToDomStyle( propertyName ) ];
@@ -972,7 +972,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                 elementWindow, elementWindowFrame;
 
                         // Webkit and Opera report non-zero offsetHeight despite that
-                        // element is inside an invisible iframe. (#4542)
+                        // element is inside an invisible iframe. (http://dev.ckeditor.com/ticket/4542)
                         if ( isVisible && CKEDITOR.env.webkit ) {
                                 elementWindow = this.getWindow();
 
@@ -1033,7 +1033,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                                         // attribute, which will be marked as "specified", even if the
                                                         // outerHTML of the element is not displaying the class attribute.
                                                         // Note : I was not able to reproduce it outside the editor,
-                                                        // but I've faced it while working on the TC of #1391.
+                                                        // but I've faced it while working on the TC of http://dev.ckeditor.com/ticket/1391.
                                                         if ( this.getAttribute( 'class' ) ) {
                                                                 return true;
                                                         }
@@ -1057,7 +1057,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                 var attrs = this.$.attributes,
                                         attrsNum = attrs.length;
 
-                                // The _moz_dirty attribute might get into the element after pasting (#5455)
+                                // The _moz_dirty attribute might get into the element after pasting (http://dev.ckeditor.com/ticket/5455)
                                 var execludeAttrs = { 'data-cke-expando': 1, _moz_dirty: 1 };
 
                                 return attrsNum > 0 && ( attrsNum > 2 || !execludeAttrs[ attrs[ 0 ].nodeName ] || ( attrsNum == 2 && !execludeAttrs[ attrs[ 1 ].nodeName ] ) );
@@ -1164,7 +1164,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                         function mergeElements( element, sibling, isNext ) {
                                 if ( sibling && sibling.type == CKEDITOR.NODE_ELEMENT ) {
                                         // Jumping over bookmark nodes and empty inline elements, e.g. <b><i></i></b>,
-                                        // queuing them to be moved later. (#5567)
+                                        // queuing them to be moved later. (http://dev.ckeditor.com/ticket/5567)
                                         var pendingNodes = [];
 
                                         while ( sibling.data( 'cke-bookmark' ) || sibling.isEmptyInlineRemoveable() ) {
@@ -1194,7 +1194,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                         }
 
                         return function( inlineOnly ) {
-                                // Merge empty links and anchors also. (#5567)
+                                // Merge empty links and anchors also. (http://dev.ckeditor.com/ticket/5567)
                                 if ( !( inlineOnly === false || CKEDITOR.dtd.$removeEmpty[ this.getName() ] || this.is( 'a' ) ) ) {
                                         return;
                                 }
@@ -1253,7 +1253,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                 };
                         } else if ( CKEDITOR.env.ie8Compat && CKEDITOR.env.secure ) {
                                 return function( name, value ) {
-                                        // IE8 throws error when setting src attribute to non-ssl value. (#7847)
+                                        // IE8 throws error when setting src attribute to non-ssl value. (http://dev.ckeditor.com/ticket/7847)
                                         if ( name == 'src' && value.match( /^http:\/\// ) ) {
                                                 try {
                                                         standard.apply( this, arguments );
@@ -1501,7 +1501,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                         clientLeft = $docElem.clientLeft || body.$.clientLeft || 0,
                                         needAdjustScrollAndBorders = true;
 
-                                // #3804: getBoundingClientRect() works differently on IE and non-IE
+                                // http://dev.ckeditor.com/ticket/3804: getBoundingClientRect() works differently on IE and non-IE
                                 // browsers, regarding scroll positions.
                                 //
                                 // On IE, the top position of the <html> element is always 0, no matter
@@ -1516,12 +1516,12 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                         needAdjustScrollAndBorders = ( quirks && inBody ) || ( !quirks && inDocElem );
                                 }
 
-                                // #12747.
+                                // http://dev.ckeditor.com/ticket/12747.
                                 if ( needAdjustScrollAndBorders ) {
                                         var scrollRelativeLeft,
                                                 scrollRelativeTop;
 
-                                        // See #12758 to know more about document.(documentElement|body).scroll(Left|Top) in Webkit.
+                                        // See http://dev.ckeditor.com/ticket/12758 to know more about document.(documentElement|body).scroll(Left|Top) in Webkit.
                                         if ( CKEDITOR.env.webkit || ( CKEDITOR.env.ie && CKEDITOR.env.version >= 12 ) ) {
                                                 scrollRelativeLeft = body.$.scrollLeft || $docElem.scrollLeft;
                                                 scrollRelativeTop = body.$.scrollTop || $docElem.scrollTop;
@@ -1603,7 +1603,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                                         parent.$.clientHeight && parent.$.clientHeight < parent.$.scrollHeight;
 
                                 // Skip body element, which will report wrong clientHeight when containing
-                                // floated content. (#9523)
+                                // floated content. (http://dev.ckeditor.com/ticket/9523)
                                 if ( overflowed && !parent.is( 'body' ) )
                                         this.scrollIntoParent( parent, alignToTop, 1 );
 
@@ -1677,7 +1677,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                         }
 
                         // [WebKit] Reset stored scrollTop value to not break scrollIntoView() method flow.
-                        // Scrolling breaks when range.select() is used right after element.scrollIntoView(). (#14659)
+                        // Scrolling breaks when range.select() is used right after element.scrollIntoView(). (http://dev.ckeditor.com/ticket/14659)
                         if ( CKEDITOR.env.webkit ) {
                                 var editor = this.getEditor( false );
 
@@ -1857,7 +1857,7 @@ CKEDITOR.dom.element.clearMarkers = function( database, element, removeFromDatab
                         this.getParent( true ) && this.$.parentNode.replaceChild( newNode.$, this.$ );
                         newNode.$[ 'data-cke-expando' ] = this.$[ 'data-cke-expando' ];
                         this.$ = newNode.$;
-                        // Bust getName's cache. (#8663)
+                        // Bust getName's cache. (http://dev.ckeditor.com/ticket/8663)
                         delete this.getName;
                 },
 
diff --git a/sources/core/dom/elementpath.js b/sources/core/dom/elementpath.js
index 1a3aed0..dd50f10 100644
--- a/sources/core/dom/elementpath.js
+++ b/sources/core/dom/elementpath.js
@@ -57,6 +57,11 @@
                 // Backward compact.
                 root = root || startNode.getDocument().getBody();
 
+                // Assign root value if startNode is null (#424)(https://dev.ckeditor.com/ticket/17028).
+                if ( !e ) {
+                        e = root;
+                }
+
                 do {
                         if ( e.type == CKEDITOR.NODE_ELEMENT ) {
                                 elements.push( e );
@@ -84,7 +89,7 @@
                                                 block = e;
 
                                         if ( pathBlockLimitElements[ elementName ] ) {
-                                                // End level DIV is considered as the block, if no block is available. (#525)
+                                                // End level DIV is considered as the block, if no block is available. (http://dev.ckeditor.com/ticket/525)
                                                 // But it must NOT be the root element (checked above).
                                                 if ( !block && elementName == 'div' && !checkHasBlock( e ) )
                                                         block = e;
@@ -181,7 +186,9 @@ CKEDITOR.dom.elementPath.prototype = {
          * @returns {CKEDITOR.dom.element} The first matched dom element or `null`.
          */
         contains: function( query, excludeRoot, fromTop ) {
-                var evaluator;
+                var i = 0,
+                        evaluator;
+
                 if ( typeof query == 'string' )
                         evaluator = function( node ) {
                                 return node.getName() == query;
@@ -203,14 +210,21 @@ CKEDITOR.dom.elementPath.prototype = {
 
                 var elements = this.elements,
                         length = elements.length;
-                excludeRoot && length--;
+
+                if ( excludeRoot ) {
+                        if ( !fromTop ) {
+                                length -= 1;
+                        } else {
+                                i += 1;
+                        }
+                }
 
                 if ( fromTop ) {
                         elements = Array.prototype.slice.call( elements, 0 );
                         elements.reverse();
                 }
 
-                for ( var i = 0; i < length; i++ ) {
+                for ( ; i < length; i++ ) {
                         if ( evaluator( elements[ i ] ) )
                                 return elements[ i ];
                 }
diff --git a/sources/core/dom/iterator.js b/sources/core/dom/iterator.js
index 50056ec..9176e33 100644
--- a/sources/core/dom/iterator.js
+++ b/sources/core/dom/iterator.js
@@ -45,7 +45,7 @@
                  */
                 this.forceBrBreak = 0;
 
-                // (#3730).
+                // (http://dev.ckeditor.com/ticket/3730).
                 /**
                  * Whether to include `<br>` elements in the enlarged range. Should be
                  * set to `false` when using the iterator in the {@link CKEDITOR#ENTER_BR} mode.
@@ -85,7 +85,7 @@
          */
 
         var beginWhitespaceRegex = /^[\r\n\t ]+$/,
-                // Ignore bookmark nodes.(#3783)
+                // Ignore bookmark nodes.(http://dev.ckeditor.com/ticket/3783)
                 bookmarkGuard = CKEDITOR.dom.walker.bookmark( false, true ),
                 whitespacesGuard = CKEDITOR.dom.walker.whitespaces( true ),
                 skipGuard = function( node ) {
@@ -191,12 +191,12 @@
                                                 }
 
                                                 // The range must finish right before the boundary,
-                                                // including possibly skipped empty spaces. (#1603)
+                                                // including possibly skipped empty spaces. (http://dev.ckeditor.com/ticket/1603)
                                                 if ( range ) {
                                                         range.setEndAt( currentNode, CKEDITOR.POSITION_BEFORE_START );
 
                                                         // The found boundary must be set as the next one at this
-                                                        // point. (#1717)
+                                                        // point. (http://dev.ckeditor.com/ticket/1717)
                                                         if ( nodeName != 'br' ) {
                                                                 this._.nextNode = currentNode;
                                                         }
@@ -244,7 +244,7 @@
                                                         closeRange = 1;
                                                         includeNode = 0;
                                                         isLast = isLast || ( parentNode.equals( lastNode ) );
-                                                        // Make sure range includes bookmarks at the end of the block. (#7359)
+                                                        // Make sure range includes bookmarks at the end of the block. (http://dev.ckeditor.com/ticket/7359)
                                                         range.setEndAt( parentNode, CKEDITOR.POSITION_BEFORE_END );
                                                         break;
                                                 }
@@ -377,7 +377,7 @@
                         // Here we are checking in guard function whether current element
                         // reach lastNode(default behaviour) and root node to prevent against
                         // getting out of editor instance root DOM object.
-                        // #12484
+                        // http://dev.ckeditor.com/ticket/12484
                         function guardFunction( node ) {
                                 return !( node.equals( lastNode ) || node.equals( rootNode ) );
                         }
@@ -397,7 +397,7 @@
                         // Indicate at least one of the range boundaries is inside a preformat block.
                         touchPre,
 
-                        // (#12178)
+                        // (http://dev.ckeditor.com/ticket/12178)
                         // Remember if following situation takes place:
                         // * startAtInnerBoundary: <p>foo[</p>...
                         // * endAtInnerBoundary: ...<p>]bar</p>
@@ -405,13 +405,13 @@
                         // Note that we test only if path block exist, because we must properly shrink
                         // range containing table and/or table cells.
                         // Note: When range is collapsed there's no way it can be shrinked.
-                        // By checking if range is collapsed we also prevent #12308.
+                        // By checking if range is collapsed we also prevent http://dev.ckeditor.com/ticket/12308.
                         startPath = range.startPath(),
                         endPath = range.endPath(),
                         startAtInnerBoundary = !range.collapsed && rangeAtInnerBlockBoundary( range, startPath.block ),
                         endAtInnerBoundary = !range.collapsed && rangeAtInnerBlockBoundary( range, endPath.block, 1 );
 
-                // Shrink the range to exclude harmful "noises" (#4087, #4450, #5435).
+                // Shrink the range to exclude harmful "noises" (http://dev.ckeditor.com/ticket/4087, http://dev.ckeditor.com/ticket/4450, http://dev.ckeditor.com/ticket/5435).
                 range.shrink( CKEDITOR.SHRINK_ELEMENT, true );
 
                 if ( startAtInnerBoundary )
@@ -437,7 +437,7 @@
 
                         // We may have an empty text node at the end of block due to [3770].
                         // If that node is the lastNode, it would cause our logic to leak to the
-                        // next block.(#3887)
+                        // next block.(http://dev.ckeditor.com/ticket/3887)
                         if ( this._.lastNode && this._.lastNode.type == CKEDITOR.NODE_TEXT && !CKEDITOR.tools.trim( this._.lastNode.getText() ) && this._.lastNode.getParent().isBlockBoundary() ) {
                                 var testRange = this.range.clone();
                                 testRange.moveToPosition( this._.lastNode, CKEDITOR.POSITION_AFTER_END );
diff --git a/sources/core/dom/node.js b/sources/core/dom/node.js
index 51bba18..69b223e 100644
--- a/sources/core/dom/node.js
+++ b/sources/core/dom/node.js
@@ -200,7 +200,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.node.prototype, {
                 }
 
                 // IE8 rename HTML5 nodes by adding `:` at the begging of the tag name when the node is cloned,
-                // so `<figure>` will be `<:figure>` after 'cloneNode'. We need to fix it (#13101).
+                // so `<figure>` will be `<:figure>` after 'cloneNode'. We need to fix it (http://dev.ckeditor.com/ticket/13101).
                 function renameNodes( node ) {
                         if ( node.type != CKEDITOR.NODE_ELEMENT && node.type != CKEDITOR.NODE_DOCUMENT_FRAGMENT )
                                 return;
@@ -804,7 +804,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.node.prototype, {
                                 } else if ( trimmed.length < originalLength ) {
                                         child.split( originalLength - trimmed.length );
 
-                                        // IE BUG: child.remove() may raise JavaScript errors here. (#81)
+                                        // IE BUG: child.remove() may raise JavaScript errors here. (http://dev.ckeditor.com/ticket/81)
                                         this.$.removeChild( this.$.firstChild );
                                 }
                         }
@@ -829,7 +829,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.node.prototype, {
                                         child.split( trimmed.length );
 
                                         // IE BUG: child.getNext().remove() may raise JavaScript errors here.
-                                        // (#81)
+                                        // (http://dev.ckeditor.com/ticket/81)
                                         this.$.lastChild.parentNode.removeChild( this.$.lastChild );
                                 }
                         }
@@ -840,7 +840,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.node.prototype, {
                         child = this.$.lastChild;
 
                         if ( child && child.type == 1 && child.nodeName.toLowerCase() == 'br' ) {
-                                // Use "eChildNode.parentNode" instead of "node" to avoid IE bug (#324).
+                                // Use "eChildNode.parentNode" instead of "node" to avoid IE bug (http://dev.ckeditor.com/ticket/324).
                                 child.parentNode.removeChild( child );
                         }
                 }
@@ -874,7 +874,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.node.prototype, {
                 if ( this.type != CKEDITOR.NODE_ELEMENT )
                         element = this.getParent();
 
-                // Prevent Edge crash (#13609, #13919).
+                // Prevent Edge crash (http://dev.ckeditor.com/ticket/13609, http://dev.ckeditor.com/ticket/13919).
                 if ( CKEDITOR.env.edge && element && element.is( 'textarea', 'input' ) ) {
                         checkOnlyAttributes = true;
                 }
diff --git a/sources/core/dom/nodelist.js b/sources/core/dom/nodelist.js
index 165a415..07af314 100644
--- a/sources/core/dom/nodelist.js
+++ b/sources/core/dom/nodelist.js
@@ -5,7 +5,7 @@
 
 /**
  * Represents a list of {@link CKEDITOR.dom.node} objects.
- * It's a wrapper for native nodes list.
+ * It is a wrapper for a native nodes list.
  *
  *              var nodeList = CKEDITOR.document.getBody().getChildren();
  *              alert( nodeList.count() ); // number [0;N]
@@ -20,7 +20,7 @@ CKEDITOR.dom.nodeList = function( nativeList ) {
 
 CKEDITOR.dom.nodeList.prototype = {
         /**
-         * Get count of nodes in this list.
+         * Gets the count of nodes in this list.
          *
          * @returns {Number}
          */
@@ -29,7 +29,7 @@ CKEDITOR.dom.nodeList.prototype = {
         },
 
         /**
-         * Get node from the list.
+         * Gets the node from the list.
          *
          * @returns {CKEDITOR.dom.node}
          */
@@ -39,5 +39,16 @@ CKEDITOR.dom.nodeList.prototype = {
 
                 var $node = this.$[ index ];
                 return $node ? new CKEDITOR.dom.node( $node ) : null;
+        },
+
+        /**
+         * Returns a node list as an array.
+         *
+         * @returns {CKEDITOR.dom.node[]}
+         */
+        toArray: function() {
+                return CKEDITOR.tools.array.map( this.$, function( nativeEl ) {
+                        return new CKEDITOR.dom.node( nativeEl );
+                } );
         }
 };
diff --git a/sources/core/dom/range.js b/sources/core/dom/range.js
index 6407074..742c24c 100644
--- a/sources/core/dom/range.js
+++ b/sources/core/dom/range.js
@@ -204,9 +204,14 @@ CKEDITOR.dom.range = function( root ) {
                 // This allows us to not think about startNode == endNode case later on.
                 // We do that only when cloning, because in other cases we can safely split this text node
                 // and hence we can easily handle this case as many others.
-                if ( isClone && endNode.type == CKEDITOR.NODE_TEXT && startNode.equals( endNode ) ) {
-                        startNode = range.document.createText( startNode.substring( startOffset, endOffset ) );
-                        docFrag.append( startNode );
+
+                // We need to handle situation when selection startNode is type of NODE_ELEMENT (#426).
+                if ( isClone &&
+                        endNode.type == CKEDITOR.NODE_TEXT &&
+                        ( startNode.equals( endNode ) || ( startNode.type === CKEDITOR.NODE_ELEMENT && startNode.getFirst().equals( endNode ) ) ) ) {
+
+                        // Here we should always be inside one text node.
+                        docFrag.append( range.document.createText( endNode.substring( startOffset, endOffset ) ) );
                         return;
                 }
 
@@ -214,7 +219,7 @@ CKEDITOR.dom.range = function( root ) {
                 // second part. The removal will be handled by the rest of the code.
                 if ( endNode.type == CKEDITOR.NODE_TEXT ) {
                         // If Extract or Delete we can split the text node,
-                        // but if Clone (2), then we cannot modify the DOM (#11586) so we mark the text node for cloning.
+                        // but if Clone (2), then we cannot modify the DOM (http://dev.ckeditor.com/ticket/11586) so we mark the text node for cloning.
                         if ( !isClone ) {
                                 endNode = endNode.split( endOffset );
                         } else {
@@ -243,7 +248,7 @@ CKEDITOR.dom.range = function( root ) {
                 // be handled by the rest of the code .
                 if ( startNode.type == CKEDITOR.NODE_TEXT ) {
                         // If Extract or Delete we can split the text node,
-                        // but if Clone (2), then we cannot modify the DOM (#11586) so we mark
+                        // but if Clone (2), then we cannot modify the DOM (http://dev.ckeditor.com/ticket/11586) so we mark
                         // the text node for cloning.
                         if ( !isClone ) {
                                 startNode.split( startOffset );
@@ -373,7 +378,7 @@ CKEDITOR.dom.range = function( root ) {
                                 // If we don't do that, in next iterations nodes will be appended to wrong parent.
                                 //
                                 // We can just take first child because the algorithm guarantees
-                                // that this will be the only child on this level. (#13568)
+                                // that this will be the only child on this level. (http://dev.ckeditor.com/ticket/13568)
                                 levelParent = levelParent.getChild( 0 );
                         }
                 }
@@ -405,7 +410,7 @@ CKEDITOR.dom.range = function( root ) {
 
                                 // When Extracting, move the removed node to the docFrag.
                                 if ( isExtract ) {
-                                        newParent.append( node );
+                                        newParent.append( node, toStart );
                                 }
                         }
 
@@ -574,7 +579,7 @@ CKEDITOR.dom.range = function( root ) {
                         // Tolerant bogus br when checking at the end of block.
                         // Reject any text node unless it's being bookmark
                         // OR it's spaces.
-                        // Reject any element unless it's being invisible empty. (#3883)
+                        // Reject any element unless it's being invisible empty. (http://dev.ckeditor.com/ticket/3883)
                         return !checkStart && isBogus( node ) ||
                                 node.type == CKEDITOR.NODE_ELEMENT &&
                                 node.is( CKEDITOR.dtd.$removeEmpty );
@@ -1052,7 +1057,7 @@ CKEDITOR.dom.range = function( root ) {
                         }
 
                         // Sometimes the endNode will come right before startNode for collapsed
-                        // ranges. Fix it. (#3780)
+                        // ranges. Fix it. (http://dev.ckeditor.com/ticket/3780)
                         if ( startNode.getPosition( endNode ) & CKEDITOR.POSITION_FOLLOWING )
                                 startNode = endNode;
 
@@ -1324,13 +1329,13 @@ CKEDITOR.dom.range = function( root ) {
 
                                                                 isWhiteSpace = /[\s\ufeff]$/.test( siblingText );
                                                         } else {
-                                                                // #12221 (Chrome) plus #11111 (Safari).
+                                                                // http://dev.ckeditor.com/ticket/12221 (Chrome) plus http://dev.ckeditor.com/ticket/11111 (Safari).
                                                                 var offsetWidth0 = CKEDITOR.env.webkit ? 1 : 0;
 
                                                                 // If this is a visible element.
                                                                 // We need to check for the bookmark attribute because IE insists on
-                                                                // rendering the display:none nodes we use for bookmarks. (#3363)
-                                                                // Line-breaks (br) are rendered with zero width, which we don't want to include. (#7041)
+                                                                // rendering the display:none nodes we use for bookmarks. (http://dev.ckeditor.com/ticket/3363)
+                                                                // Line-breaks (br) are rendered with zero width, which we don't want to include. (http://dev.ckeditor.com/ticket/7041)
                                                                 if ( ( sibling.$.offsetWidth > offsetWidth0 || excludeBrs && sibling.is( 'br' ) ) && !sibling.data( 'cke-bookmark' ) ) {
                                                                         // We'll accept it only if we need
                                                                         // whitespace, and this is an inline
@@ -1399,7 +1404,7 @@ CKEDITOR.dom.range = function( root ) {
 
                                         // Process the end boundary. This is basically the same
                                         // code used for the start boundary, with small changes to
-                                        // make it work in the oposite side (to the right). This
+                                        // make it work in the opposite side (to the right). This
                                         // makes it difficult to reuse the code here. So, fixes to
                                         // the above code are likely to be replicated here.
 
@@ -1482,7 +1487,7 @@ CKEDITOR.dom.range = function( root ) {
                                                         }
                                                 }
                                         } else {
-                                                // Get the node right after the boudary to be checked
+                                                // Get the node right after the boundary to be checked
                                                 // first.
                                                 sibling = container.getChild( offset );
 
@@ -1525,8 +1530,8 @@ CKEDITOR.dom.range = function( root ) {
                                                         } else if ( sibling.type == CKEDITOR.NODE_ELEMENT ) {
                                                                 // If this is a visible element.
                                                                 // We need to check for the bookmark attribute because IE insists on
-                                                                // rendering the display:none nodes we use for bookmarks. (#3363)
-                                                                // Line-breaks (br) are rendered with zero width, which we don't want to include. (#7041)
+                                                                // rendering the display:none nodes we use for bookmarks. (http://dev.ckeditor.com/ticket/3363)
+                                                                // Line-breaks (br) are rendered with zero width, which we don't want to include. (http://dev.ckeditor.com/ticket/7041)
                                                                 if ( ( sibling.$.offsetWidth > 0 || excludeBrs && sibling.is( 'br' ) ) && !sibling.data( 'cke-bookmark' ) ) {
                                                                         // We'll accept it only if we need
                                                                         // whitespace, and this is an inline
@@ -1617,7 +1622,7 @@ CKEDITOR.dom.range = function( root ) {
                                                 boundaryGuard = function( node ) {
                                                         // We should not check contents of non-editable elements. It may happen
                                                         // that inline widget has display:table child which should not block range#enlarge.
-                                                        // When encoutered non-editable element...
+                                                        // When encountered non-editable element...
                                                         if ( node.type == CKEDITOR.NODE_ELEMENT && node.getAttribute( 'contenteditable' ) == 'false' ) {
                                                                 if ( inNonEditable ) {
                                                                         // ... in which we already were, reset it (because we're leaving it) and return.
@@ -1639,7 +1644,7 @@ CKEDITOR.dom.range = function( root ) {
                                                                 blockBoundary = node;
                                                         return retval;
                                                 },
-                                                // Record the encounted 'tailBr' for later use.
+                                                // Record the encountered 'tailBr' for later use.
                                                 tailBrGuard = function( node ) {
                                                         var retval = boundaryGuard( node );
                                                         if ( !retval && node.is && node.is( 'br' ) )
@@ -1660,7 +1665,7 @@ CKEDITOR.dom.range = function( root ) {
                                         this.setStartAt( blockBoundary, !blockBoundary.is( 'br' ) && ( !enlargeable && this.checkStartOfBlock() ||
                                                 enlargeable && blockBoundary.contains( enlargeable ) ) ? CKEDITOR.POSITION_AFTER_START : CKEDITOR.POSITION_AFTER_END );
 
-                                        // Avoid enlarging the range further when end boundary spans right after the BR. (#7490)
+                                        // Avoid enlarging the range further when end boundary spans right after the BR. (http://dev.ckeditor.com/ticket/7490)
                                         if ( unit == CKEDITOR.ENLARGE_LIST_ITEM_CONTENTS ) {
                                                 var theRange = this.clone();
                                                 walker = new CKEDITOR.dom.walker( theRange );
@@ -1715,18 +1720,28 @@ CKEDITOR.dom.range = function( root ) {
                 },
 
                 /**
-                 * Descrease the range to make sure that boundaries
-                 * always anchor beside text nodes or innermost element.
+                 * Decreases the range to make sure that boundaries
+                 * always anchor beside text nodes or the innermost element.
                  *
                  * @param {Number} mode The shrinking mode ({@link CKEDITOR#SHRINK_ELEMENT} or {@link CKEDITOR#SHRINK_TEXT}).
                  *
-                 * * {@link CKEDITOR#SHRINK_ELEMENT} - Shrink the range boundaries to the edge of the innermost element.
-                 * * {@link CKEDITOR#SHRINK_TEXT} - Shrink the range boudaries to anchor by the side of enclosed text
-                 *     node, range remains if there's no text nodes on boundaries at all.
-                 *
-                 * @param {Boolean} selectContents Whether result range anchors at the inner OR outer boundary of the node.
+                 * * {@link CKEDITOR#SHRINK_ELEMENT} &ndash; Shrinks the range boundaries to the edge of the innermost element.
+                 * * {@link CKEDITOR#SHRINK_TEXT} &ndash; Shrinks the range boundaries to anchor by the side of enclosed text
+                 *     node. The range remains if there are no text nodes available on boundaries.
+                 *
+                 * @param {Boolean} [selectContents=false] Whether the resulting range anchors at the inner OR outer boundary of the node.
+                 * @param {Boolean/Object} [options=true] If this parameter is of a Boolean type, it is treated as
+                 * `options.shrinkOnBlockBoundary`. This parameter was added in 4.7.0.
+                 * @param {Boolean} [options.shrinkOnBlockBoundary=true] Whether the block boundary should be included in
+                 * the shrunk range.
+                 * @param {Boolean} [options.skipBogus=false] Whether bogus `<br>` elements should be ignored while
+                 * `mode` is set to {@link CKEDITOR#SHRINK_TEXT}. This option was added in 4.7.0.
                  */
-                shrink: function( mode, selectContents, shrinkOnBlockBoundary ) {
+                shrink: function( mode, selectContents, options ) {
+                        var shrinkOnBlockBoundary = typeof options === 'boolean' ? options :
+                                ( options && typeof options.shrinkOnBlockBoundary === 'boolean' ? options.shrinkOnBlockBoundary : true ),
+                                skipBogus = options && options.skipBogus;
+
                         // Unable to shrink a collapsed range.
                         if ( !this.collapsed ) {
                                 mode = mode || CKEDITOR.SHRINK_TEXT;
@@ -1749,7 +1764,7 @@ CKEDITOR.dom.range = function( root ) {
                                                 walkerRange.setStartAfter( startContainer );
                                         else {
                                                 // Enlarge the range properly to avoid walker making
-                                                // DOM changes caused by triming the text nodes later.
+                                                // DOM changes caused by trimming the text nodes later.
                                                 walkerRange.setStartBefore( startContainer );
                                                 moveStart = 0;
                                         }
@@ -1767,7 +1782,8 @@ CKEDITOR.dom.range = function( root ) {
                                 }
 
                                 var walker = new CKEDITOR.dom.walker( walkerRange ),
-                                        isBookmark = CKEDITOR.dom.walker.bookmark();
+                                        isBookmark = CKEDITOR.dom.walker.bookmark(),
+                                        isBogus = CKEDITOR.dom.walker.bogus();
 
                                 walker.evaluator = function( node ) {
                                         return node.type == ( mode == CKEDITOR.SHRINK_ELEMENT ? CKEDITOR.NODE_ELEMENT : CKEDITOR.NODE_TEXT );
@@ -1775,6 +1791,11 @@ CKEDITOR.dom.range = function( root ) {
 
                                 var currentElement;
                                 walker.guard = function( node, movingOut ) {
+                                        // Skipping bogus before other cases (http://dev.ckeditor.com/ticket/17010).
+                                        if ( skipBogus && isBogus( node ) ) {
+                                                return true;
+                                        }
+
                                         if ( isBookmark( node ) )
                                                 return true;
 
@@ -1816,7 +1837,7 @@ CKEDITOR.dom.range = function( root ) {
 
                 /**
                  * Inserts a node at the start of the range. The range will be expanded
-                 * the contain the node.
+                 * to contain the node.
                  *
                  * @param {CKEDITOR.dom.node} node
                  */
@@ -1843,7 +1864,7 @@ CKEDITOR.dom.range = function( root ) {
                 },
 
                 /**
-                 * Moves the range to given position according to specified node.
+                 * Moves the range to a given position according to the specified node.
                  *
                  *              // HTML: <p>Foo <b>bar</b></p>
                  *              range.moveToPosition( elB, CKEDITOR.POSITION_BEFORE_START );
@@ -1851,7 +1872,7 @@ CKEDITOR.dom.range = function( root ) {
                  *
                  * See also {@link #setStartAt} and {@link #setEndAt}.
                  *
-                 * @param {CKEDITOR.dom.node} node The node according to which position will be set.
+                 * @param {CKEDITOR.dom.node} node The node according to which the position will be set.
                  * @param {Number} position One of {@link CKEDITOR#POSITION_BEFORE_START},
                  * {@link CKEDITOR#POSITION_AFTER_START}, {@link CKEDITOR#POSITION_BEFORE_END},
                  * {@link CKEDITOR#POSITION_AFTER_END}.
@@ -2118,7 +2139,7 @@ CKEDITOR.dom.range = function( root ) {
                         // So even if the initial range was placed before the bogus <br>, after creating the bookmark it
                         // is placed before the bookmark.
                         // Fortunately, getBogus() is able to skip the bookmark so it finds the bogus <br> in this case.
-                        // We remove incorrectly placed one and add a brand new one. (#13001)
+                        // We remove incorrectly placed one and add a brand new one. (http://dev.ckeditor.com/ticket/13001)
                         var bogus = fixedBlock.getBogus();
                         if ( bogus ) {
                                 bogus.remove();
@@ -2340,7 +2361,7 @@ CKEDITOR.dom.range = function( root ) {
                                         this.trim( 0, 1 );
                         }
 
-                        // Antecipate the trim() call here, so the walker will not make
+                        // Anticipate the trim() call here, so the walker will not make
                         // changes to the DOM, which would not get reflected into this
                         // range otherwise.
                         this.trim();
@@ -2379,7 +2400,7 @@ CKEDITOR.dom.range = function( root ) {
                                         this.trim( 1, 0 );
                         }
 
-                        // Antecipate the trim() call here, so the walker will not make
+                        // Anticipate the trim() call here, so the walker will not make
                         // changes to the DOM, which would not get reflected into this
                         // range otherwise.
                         this.trim();
@@ -2636,7 +2657,7 @@ CKEDITOR.dom.range = function( root ) {
                 getEnclosedNode: function() {
                         var walkerRange = this.clone();
 
-                        // Optimize and analyze the range to avoid DOM destructive nature of walker. (#5780)
+                        // Optimize and analyze the range to avoid DOM destructive nature of walker. (http://dev.ckeditor.com/ticket/5780)
                         walkerRange.optimize();
                         if ( walkerRange.startContainer.type != CKEDITOR.NODE_ELEMENT || walkerRange.endContainer.type != CKEDITOR.NODE_ELEMENT )
                                 return null;
@@ -2703,6 +2724,53 @@ CKEDITOR.dom.range = function( root ) {
                 getPreviousEditableNode: getNextEditableNode( 1 ),
 
                 /**
+                 * Returns any table element, like `td`, `tbody`, `table` etc. from a given range. The element
+                 * is returned only if the range is contained within one table (might be a nested
+                 * table, but it cannot be two different tables on the same DOM level).
+                 *
+                 * @private
+                 * @since 4.7
+                 * @param {Object} [tableElements] Mapping of element names that should be considered.
+                 * @returns {CKEDITOR.dom.element/null}
+                 */
+                _getTableElement: function( tableElements ) {
+                        tableElements = tableElements || {
+                                td: 1,
+                                th: 1,
+                                tr: 1,
+                                tbody: 1,
+                                thead: 1,
+                                tfoot: 1,
+                                table: 1
+                        };
+
+                        var start = this.startContainer,
+                                end = this.endContainer,
+                                startTable = start.getAscendant( 'table', true ),
+                                endTable = end.getAscendant( 'table', true );
+
+                        // Super weird edge case in Safari: if there is a table with only one cell inside and that cell
+                        // is selected, then the end boundary of the table is moved into editor's editable.
+                        // That case is also present when selecting the last cell inside nested table.
+                        if ( CKEDITOR.env.safari && startTable && end.equals( this.root ) ) {
+                                return start.getAscendant( tableElements, true );
+                        }
+
+                        if ( this.getEnclosedNode() ) {
+                                return this.getEnclosedNode().getAscendant( tableElements, true );
+                        }
+
+                        // Ensure that selection starts and ends in the same table or one of the table is inside the other.
+                        if ( startTable && endTable && ( startTable.equals( endTable ) || startTable.contains( endTable ) ||
+                                endTable.contains( startTable ) ) ) {
+
+                                return start.getAscendant( tableElements, true );
+                        }
+
+                        return null;
+                },
+
+                /**
                  * Scrolls the start of current range into view.
                  */
                 scrollIntoView: function() {
@@ -2819,10 +2887,10 @@ CKEDITOR.dom.range = function( root ) {
                                                 continue;
                                         }
 
-                                        // It's not enough to get elements from common ancestor, because it migth contain too many matches.
+                                        // It's not enough to get elements from common ancestor, because it might contain too many matches.
                                         // We need to ensure that returned items are between boundary points.
                                         isStartGood = ( curItem.getPosition( boundaries.startNode ) & CKEDITOR.POSITION_FOLLOWING ) || boundaries.startNode.equals( curItem );
-                                        isEndGood = ( curItem.getPosition( boundaries.endNode ) & ( CKEDITOR.POSITION_PRECEDING + CKEDITOR.POSITION_IS_CONTAINED ) );
+                                        isEndGood = ( curItem.getPosition( boundaries.endNode ) & ( CKEDITOR.POSITION_PRECEDING + CKEDITOR.POSITION_IS_CONTAINED ) ) || boundaries.endNode.equals( curItem );
 
                                         if ( isStartGood && isEndGood ) {
                                                 ret.push( curItem );
@@ -2834,6 +2902,62 @@ CKEDITOR.dom.range = function( root ) {
                 }
         };
 
+        /**
+         * Merges every subsequent range in given set, returning a smaller array of ranges.
+         *
+         * Note that each range in the returned value will be enlarged with `CKEDITOR.ENLARGE_ELEMENT` value.
+         *
+         * @since 4.7.0
+         * @static
+         * @param {CKEDITOR.dom.range[]} ranges
+         * @returns {CKEDITOR.dom.range[]} Set of merged ranges.
+         * @member CKEDITOR.dom.range
+         */
+        CKEDITOR.dom.range.mergeRanges = function( ranges ) {
+                return CKEDITOR.tools.array.reduce( ranges, function( ret, rng ) {
+                        // Last range ATM.
+                        var lastRange = ret[ ret.length - 1 ],
+                                isContinuation = false;
+
+                        // Make a clone, we don't want to modify input.
+                        rng = rng.clone();
+                        rng.enlarge( CKEDITOR.ENLARGE_ELEMENT );
+
+                        if ( lastRange ) {
+                                // The trick is to create a range spanning the gap between the two ranges. Then iterate over
+                                // each node found in this gap. If it contains anything other than whitespace, then it means it
+                                // is not a continuation.
+                                var gapRange = new CKEDITOR.dom.range( rng.root ),
+                                        walker = new CKEDITOR.dom.walker( gapRange ),
+                                        isWhitespace = CKEDITOR.dom.walker.whitespaces(),
+                                        nodeInBetween;
+
+                                gapRange.setStart( lastRange.endContainer, lastRange.endOffset );
+                                gapRange.setEnd( rng.startContainer, rng.startOffset );
+
+                                nodeInBetween = walker.next();
+
+                                while ( isWhitespace( nodeInBetween ) || rng.endContainer.equals( nodeInBetween ) ) {
+                                        // We don't care about whitespaces, and range container. Also we skip the endContainer,
+                                        // as it will also be provided by the iterator (as it visits it's opening tag).
+                                        nodeInBetween = walker.next();
+                                }
+
+                                // Simply, if anything has been found there's a content in between the two.
+                                isContinuation = !nodeInBetween;
+                        }
+
+                        if ( isContinuation ) {
+                                // If last range ends, where the current range starts, then let's merge it.
+                                lastRange.setEnd( rng.endContainer, rng.endOffset );
+                        } else {
+                                // In other case just push cur range into the stack.
+                                ret.push( rng );
+                        }
+
+                        return ret;
+                }, [] );
+        };
 
 } )();
 
diff --git a/sources/core/dom/rangelist.js b/sources/core/dom/rangelist.js
index 250dfd9..15ccb88 100644
--- a/sources/core/dom/rangelist.js
+++ b/sources/core/dom/rangelist.js
@@ -164,7 +164,7 @@
         };
 
         // Update the specified range which has been mangled by previous insertion of
-        // range bookmark nodes.(#3256)
+        // range bookmark nodes.(http://dev.ckeditor.com/ticket/3256)
         function updateDirtyRange( bookmark, dirtyRange, checkEnd ) {
                 var serializable = bookmark.serializable,
                         container = dirtyRange[ checkEnd ? 'endContainer' : 'startContainer' ],
diff --git a/sources/core/dom/text.js b/sources/core/dom/text.js
index ce20ffe..e77a3d9 100644
--- a/sources/core/dom/text.js
+++ b/sources/core/dom/text.js
@@ -106,7 +106,7 @@ CKEDITOR.tools.extend( CKEDITOR.dom.text.prototype, {
                                 retval.insertAfter( this );
                         } else {
                                 // IE BUG: IE8+ does not update the childNodes array in DOM after splitText(),
-                                // we need to make some DOM changes to make it update. (#3436)
+                                // we need to make some DOM changes to make it update. (http://dev.ckeditor.com/ticket/3436)
                                 var workaround = doc.createText( '' );
                                 workaround.insertAfter( retval );
                                 workaround.remove();
diff --git a/sources/core/dom/walker.js b/sources/core/dom/walker.js
index cec4574..8665909 100644
--- a/sources/core/dom/walker.js
+++ b/sources/core/dom/walker.js
@@ -319,7 +319,7 @@
          */
         CKEDITOR.dom.element.prototype.isBlockBoundary = function( customNodeNames ) {
                 // Whether element is in normal page flow. Floated or positioned elements are out of page flow.
-                // Don't consider floated or positioned formatting as block boundary, fall back to dtd check in that case. (#6297)
+                // Don't consider floated or positioned formatting as block boundary, fall back to dtd check in that case. (http://dev.ckeditor.com/ticket/6297)
                 var inPageFlow = this.getComputedStyle( 'float' ) == 'none' && !( this.getComputedStyle( 'position' ) in outOfFlowPositions );
 
                 if ( inPageFlow && blockBoundaryDisplayMatch[ this.getComputedStyle( 'display' ) ] )
@@ -388,7 +388,7 @@
                 return function( node ) {
                         var isWhitespace;
                         if ( node && node.type == CKEDITOR.NODE_TEXT ) {
-                                // Whitespace, as well as the Filling Char Sequence text node used in Webkit. (#9384, #13816)
+                                // Whitespace, as well as the Filling Char Sequence text node used in Webkit. (http://dev.ckeditor.com/ticket/9384, http://dev.ckeditor.com/ticket/13816)
                                 isWhitespace = !CKEDITOR.tools.trim( node.getText() ) ||
                                         CKEDITOR.env.webkit && node.getText() == CKEDITOR.dom.selection.FILLING_CHAR_SEQUENCE;
                         }
@@ -406,7 +406,7 @@
          */
         CKEDITOR.dom.walker.invisible = function( isReject ) {
                 var whitespace = CKEDITOR.dom.walker.whitespaces(),
-                        // #12221 (Chrome) plus #11111 (Safari).
+                        // http://dev.ckeditor.com/ticket/12221 (Chrome) plus http://dev.ckeditor.com/ticket/11111 (Safari).
                         offsetWidth0 = CKEDITOR.env.webkit ? 1 : 0;
 
                 return function( node ) {
@@ -422,7 +422,7 @@
                                 // Nodes that take no spaces in wysiwyg:
                                 // 1. White-spaces but not including NBSP.
                                 // 2. Empty inline elements, e.g. <b></b>.
-                                // 3. <br> elements (bogus, surrounded by text) (#12423).
+                                // 3. <br> elements (bogus, surrounded by text) (http://dev.ckeditor.com/ticket/12423).
                                 invisible = node.$.offsetWidth <= offsetWidth0;
                         }
 
@@ -636,7 +636,7 @@
          * @returns {CKEDITOR.dom.node/Boolean} Bogus node or `false`.
          */
         CKEDITOR.dom.element.prototype.getBogus = function() {
-                // Bogus are not always at the end, e.g. <p><a>text<br /></a></p> (#7070).
+                // Bogus are not always at the end, e.g. <p><a>text<br /></a></p> (http://dev.ckeditor.com/ticket/7070).
                 var tail = this;
                 do {
                         tail = tail.getPreviousSourceNode();