[wp-testers] CITE attribute of BLOCKQUOTE stripped by TinyMCE

Andy Skelton skeltoac at gmail.com
Fri May 16 17:28:34 GMT 2008


On Fri, May 16, 2008 at 11:54 AM, Rick Beckman <rick.beckman at gmail.com> wrote:
> Strip Microsoft Word tags if we must, but valid HTML -- especially when
> posted by an admin -- should be respected.

We used to ship TinyMCE configured with unrestricted HTML because we
do the security filtering with KSES in PHP. Looks like it's now back
to the default set of XHTML tags and attributes, which may lack some
combinations which are valid. You can file a trac ticket, ping Andrew
Ozz, or write a plugin to filter the TinyMCE init array
(tiny_mce_before_init).

Andy


More information about the wp-testers mailing list