[wp-testers] CITE attribute of BLOCKQUOTE stripped by TinyMCE
Andy Skelton
skeltoac at gmail.com
Fri May 16 17:28:34 GMT 2008
On Fri, May 16, 2008 at 11:54 AM, Rick Beckman <rick.beckman at gmail.com> wrote:
> Strip Microsoft Word tags if we must, but valid HTML -- especially when
> posted by an admin -- should be respected.
We used to ship TinyMCE configured with unrestricted HTML because we
do the security filtering with KSES in PHP. Looks like it's now back
to the default set of XHTML tags and attributes, which may lack some
combinations which are valid. You can file a trac ticket, ping Andrew
Ozz, or write a plugin to filter the TinyMCE init array
(tiny_mce_before_init).
Andy
More information about the wp-testers
mailing list