[wpmu-trac] [WordPress MU Trac] #1138: wysiwyg editor and <script> tags

WordPress MU Trac wpmu-trac at lists.automattic.com
Fri Oct 30 09:36:22 UTC 2009


#1138: wysiwyg editor and <script> tags
---------------------+------------------------------------------------------
 Reporter:  dd_lt    |       Owner:  somebody       
     Type:  defect   |      Status:  new            
 Priority:  normal   |   Milestone:                 
Component:  General  |     Version:  2.8            
 Severity:  normal   |    Keywords:  wysiwyg, script
---------------------+------------------------------------------------------

Comment(by dd_lt):

 Hello,
 donncha: nop, didn't try on WP.
 jamescollins: No, even if I'm logged in as site admin, _showEmbeddedAlbum
 code is stripped.
 IMHO, the reason is not security - <script
 src="http://external.com/js.js"></script> is still there, only the code
 between <script> and </script> is stripped. :)
 about [fotoembed id=223] yeah, probably this could be used as a solution,
 will think about it, thanks. Anyway, it would be nice to have a
 possibility to simply paste the code and have it untouched - in some
 situations [embedme id=1] can't be used (some other external sources with
 video/images/polls generated by JS).

-- 
Ticket URL: <http://trac.mu.wordpress.org/ticket/1138#comment:3>
WordPress MU Trac <http://mu.wordpress.org/>
WordPress Multiuser


More information about the wpmu-trac mailing list