[wp-hackers] <Input> tags stripped when saving page

Otto otto at ottodestruct.com
Thu Jan 27 19:36:16 UTC 2011


On Thu, Jan 27, 2011 at 1:29 PM, Raj <lists at krusible.com> wrote:
> When a page containing <input> tags is saved in a sub-blog in a multisite
> installation, the input tags are stripped out. Is this a security measure or
> is there any other reasoning for this. Can this be prevented?
>
> Also, this doesn't seem to happen when the super-admin saves the page
> content.

In a multi-site install, only the super-admin has the unfiltered_html
capability, by default.

-Otto


More information about the wp-hackers mailing list