[wp-trac] [WordPress Trac] #36755: Native oEmbed support on Custom Post Types produces Cross-site scripting errors or are not rendered at all.

[WordPress Trac]

#36755: Native oEmbed support on Custom Post Types produces Cross-site scripting
errors or are not rendered at all.
-------------------------------+------------------------------
 Reporter:  webdevmattcrom     |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  TinyMCE            |     Version:  4.5.1
 Severity:  normal             |  Resolution:
 Keywords:  needs-screenshots  |     Focuses:  javascript
-------------------------------+------------------------------

Comment (by webdevmattcrom):

 Replying to [comment:4 DrewAPicture]:
 > To be clear: The problem strictly extends to the embed view not
 rendering correctly in the visual editor, correct?

 No, it is not limited to the visual editor. The visual editor does not
 render them as embeds, and the front-end has a variety of results. Either
 the 404 results of an embed, or the naked URL being output, or an embed
 being rendered but with Cross-site scripting errors which prevent any
 images or content from displaying, only the Title of the post.

 Screenshots coming.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36755#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform