[wpmu-trac] [WordPress MU Trac] #1138: wysiwyg editor and <script> tags

WordPress MU Trac wpmu-trac at lists.automattic.com
Thu Oct 29 00:47:15 UTC 2009


#1138: wysiwyg editor and <script> tags
---------------------+------------------------------------------------------
 Reporter:  dd_lt    |       Owner:  somebody       
     Type:  defect   |      Status:  new            
 Priority:  normal   |   Milestone:                 
Component:  General  |     Version:  2.8            
 Severity:  normal   |    Keywords:  wysiwyg, script
---------------------+------------------------------------------------------

Comment(by jamescollins):

 As far as I'm aware, KSES will strip out <script> tags for users without
 the unfiltered_html capability.

 In WordPress, Administrators have this capability.

 But in WordPress MU, only site admins have this. Normal end user
 administrators don't, so the code will be stripped. This is done for
 security reasons.

 To get around this, we generally create simple plugins that contain a
 shortcode. For example, you could create a plugin that adds a shortcode
 such as:

 [fotoembed id=223], and then this shortcode would actually output the
 correct javascript embed code.

-- 
Ticket URL: <http://trac.mu.wordpress.org/ticket/1138#comment:2>
WordPress MU Trac <http://mu.wordpress.org/>
WordPress Multiuser


More information about the wpmu-trac mailing list