resetLoader removes a host-injected embed script tag and global it does not own #32

loadScript is explicitly written to cooperate with a page that loads embed.js itself:

• it returns early when window.ImageEditor already exists (loadScript.ts#L40)
• it reuses a host-injected <script> tag rather than injecting a duplicate (loadScript.ts#L52-L54)

But resetLoader tears everything down unconditionally:

https://github.com/unlayer/react-image-editor/blob/628b507/src/loadScript.ts#L122-L128

findScriptTag(scriptUrl)?.remove();
delete window.ImageEditor;

It has no notion of who created the tag, and it is called automatically from the component's terminal .catch:

https://github.com/unlayer/react-image-editor/blob/628b507/src/ImageEditor.tsx#L135-L144

Impact

On a page where the host (or another library, or a second non-React embed) owns window.ImageEditor, a versioned-bundle load failure inside our component removes a DOM node we never created and deletes a global we do not own. Any other consumer of the embed on that page breaks, and nothing tells them why.

This is the exact scenario the reuse logic on line 52 was written to support, so the two halves of the module currently disagree about ownership.

Suggested fix

Record ownership when the tag is created — a flag on TrackedLoad, a data- attribute, or a module-level WeakSet of tags we injected — and have resetLoader only remove the tag / delete the global when we own them. When we don't, evict the cached promise (and abort pending waiters) but leave the page's own state alone.