[wp-trac] [WordPress Trac] #10151: HTML5 <video> elements stripped in kses.php

WordPress Trac wp-trac at lists.automattic.com
Tue Dec 29 04:25:33 UTC 2009


#10151: HTML5 <video> elements stripped in kses.php
-------------------------+--------------------------------------------------
 Reporter:  GChriss      |       Owner:  ryan          
     Type:  enhancement  |      Status:  new           
 Priority:  normal       |   Milestone:  Future Release
Component:  Security     |     Version:  2.8           
 Severity:  normal       |    Keywords:  needs-patch   
-------------------------+--------------------------------------------------

Comment(by azaozz):

 It's not hard to stop TinyMCE stripping <video>, <audio> and other new
 HTML 5.0 tags. The problem is what would the browsers show in the
 `contentEditable` iframe and would that bring any security problems. KSES
 is the backend HTML safety filter.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10151#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list