[wp-trac] [WordPress Trac] #58610: Allow Custom CSS to Site Admins in Multisite

WordPress Trac noreply at wordpress.org
Fri Jun 23 20:19:20 UTC 2023


#58610: Allow Custom CSS to Site Admins in Multisite
-------------------------+-------------------------------------------------
 Reporter:  anrghg       |       Owner:  (none)
     Type:  feature      |      Status:  new
  request                |
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  Customize    |     Version:
 Severity:  major        |  Resolution:
 Keywords:               |     Focuses:  ui, css, administration, multisite
-------------------------+-------------------------------------------------
Changes (by anrghg):

 * type:  defect (bug) => feature request


Comment:

 Replying to [comment:1 lenasterg]:

 Thank you very much for warning me, for the plugin and for its code.

 When added in WordPress 4.7, the Custom CSS editor probably didn’t filter
 the CSS, hence the point about site admins “not trusted with unfiltered
 CSS.”

 But today, the Custom CSS editor does filter the CSS. E.g. when CSS has
 HTML tags in it, it is not saved to the database. Hence the point about
 unfiltered CSS is currently invalid. As a result, this code should be part
 of WordPress Core.

 Today, the now useless feature that this code is working around only
 screws WordPress up. I had no idea that we need an extra plugin to get
 WordPress to work as expected. How could I? I did do a Google search about
 the topic, to no avail.

 Please correct me if I missed the point.

 Thanks.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58610#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list