[wp-hackers] <Input> tags stripped when saving page

Bill Dennen dennen at gmail.com
Thu Jan 27 19:44:44 UTC 2011


> When a page containing <input> tags is saved in a sub-blog in a multisite
> installation, the input tags are stripped out. Is this a security measure or
> is there any other reasoning for this. Can this be prevented?

Enabling this plugin will solve the problem -- it gives Editors the
unfiltered_html capability.

http://wordpress.org/extend/plugins/unfiltered-mu/

"Unfiltered MU gives Administrators and Editors the unfiltered_html
capability. This prevents WordPress MU/WordPress 3.0 multisite from
stripping <iframe>, <embed>, etc. from these users' posts. Authors and
Contributors do not get this capability for security reasons."

-Bill


More information about the wp-hackers mailing list