[wp-trac] [WordPress Trac] #14174: Network users unable to embed objects / scripts into editor

WordPress Trac wp-trac at lists.automattic.com
Fri Jul 2 05:27:20 UTC 2010


#14174: Network users unable to embed objects / scripts into editor
--------------------------+-------------------------------------------------
 Reporter:  firmdot       |        Owner:         
     Type:  defect (bug)  |       Status:  closed 
 Priority:  normal        |    Milestone:         
Component:  Editor        |      Version:  3.0    
 Severity:  normal        |   Resolution:  invalid
 Keywords:                |  
--------------------------+-------------------------------------------------
Changes (by nacin):

  * status:  new => closed
  * resolution:  => invalid
  * severity:  blocker => normal
  * milestone:  Awaiting Review =>


Comment:

 Only super admins are given the ability to use unfiltered HTML.

 [http://codex.wordpress.org/FAQ_Security#Why_are_some_users_allowed_to_post_unfiltered_HTML.3F
 This explanation] says why the capability is dangerous. Note that it only
 applies to multisite.

 There is a plugin, http://wordpress.org/extend/plugins/unfiltered-mu/. I
 just reported a typo in it to Donncha yesterday, and he replied that it
 might not work with 3.0. But nonetheless, that's the solution.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/14174#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list