[wp-trac] [WordPress Trac] #10337: Easier embeds for 2.9 (oEmbed perhaps?)

WordPress Trac wp-trac at lists.automattic.com
Fri Dec 18 11:47:30 UTC 2009


#10337: Easier embeds for 2.9  (oEmbed perhaps?)
-------------------------------------+--------------------------------------
 Reporter:  ryan                     |        Owner:  Viper007Bond
     Type:  task (blessed)           |       Status:  closed      
 Priority:  normal                   |    Milestone:  2.9         
Component:  Shortcodes               |      Version:              
 Severity:  normal                   |   Resolution:  fixed       
 Keywords:  has-patch needs-testing  |  
-------------------------------------+--------------------------------------

Comment(by Viper007Bond):

 Replying to [comment:78 otto42]:
 > Of course not, that would be insane. But there's got to be a better way
 than whitelisting. Even doing something like stripping out script tags by
 default would be a better solution.

 I thought about that, but a lotta sites do their embeds using Javascript.
 And even `<object>` itself can be bad (there's a reason none of that stuff
 is allowed on WordPress.com for example).

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10337#comment:79>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list