[wpmu-trac] [WordPress MU Trac] #1138: wysiwyg editor and <script> tags
WordPress MU Trac
wpmu-trac at lists.automattic.com
Fri Oct 30 09:36:22 UTC 2009
#1138: wysiwyg editor and <script> tags
---------------------+------------------------------------------------------
Reporter: dd_lt | Owner: somebody
Type: defect | Status: new
Priority: normal | Milestone:
Component: General | Version: 2.8
Severity: normal | Keywords: wysiwyg, script
---------------------+------------------------------------------------------
Comment(by dd_lt):
Hello,
donncha: nop, didn't try on WP.
jamescollins: No, even if I'm logged in as site admin, _showEmbeddedAlbum
code is stripped.
IMHO, the reason is not security - <script
src="http://external.com/js.js"></script> is still there, only the code
between <script> and </script> is stripped. :)
about [fotoembed id=223] yeah, probably this could be used as a solution,
will think about it, thanks. Anyway, it would be nice to have a
possibility to simply paste the code and have it untouched - in some
situations [embedme id=1] can't be used (some other external sources with
video/images/polls generated by JS).
--
Ticket URL: <http://trac.mu.wordpress.org/ticket/1138#comment:3>
WordPress MU Trac <http://mu.wordpress.org/>
WordPress Multiuser
More information about the wpmu-trac
mailing list