jeudi 26 mars 2015

Why are iframes from WordPress oEmbed stripped with wp_kses_post?


The docs for wp_kses_post() say "Sanitize content for allowed HTML tags for post content." iframe in general is an allowed tag, but more specifically I think it should allow tags created by WordPress for posts via oEmbed.


Is this a deliberate choice, or an oversight?





Aucun commentaire:

Enregistrer un commentaire