[wp-trac] [WordPress Trac] #27858: TinyMCE strips on* JS actions even when user has unfiltered_html capability

WordPress Trac noreply at wordpress.org
Wed Aug 13 07:40:40 UTC 2014


#27858: TinyMCE strips on* JS actions even when user has unfiltered_html capability
--------------------------+-------------------------
 Reporter:  TTBoS         |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  TinyMCE       |     Version:  3.9
 Severity:  normal        |  Resolution:  wontfix
 Keywords:                |     Focuses:  javascript
--------------------------+-------------------------
Changes (by DrewAPicture):

 * status:  reopened => closed
 * resolution:   => wontfix
 * milestone:  4.0 =>


Comment:

 Closing as wontfix in favor of plugins having the ability to selectively
 re-enable the on* attributes via a filter, see
 https://gist.github.com/adamsilverstein/7741b38133fe3a593382.

 As @azaozz said in comment:21, the on* actions have been disabled since we
 upgraded to TinyMCE 4.0 in 3.9 with few complaints. If somebody has a
 legitimate use case, they can use the filter to re-allow selected actions.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27858#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list