[wp-meta] [Making WordPress.org] #1616: Remote CSS: Allow data URIs in CSS properties
Making WordPress.org
noreply at wordpress.org
Fri Mar 4 23:45:36 UTC 2016
#1616: Remote CSS: Allow data URIs in CSS properties
--------------------------+-----------------------
Reporter: ryelle | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: wordcamp.org | Keywords: has-patch
--------------------------+-----------------------
I'm using the Remote CSS feature for WordCamp Boston. I'd like to use SVGs
for background images, encoded directly into the CSS file using [https
://css-tricks.com/data-uris/ data-uris]. Unfortunately, the sanitization
for URLs in the `jetpack-tweaks` sees this value as a URL, and strips
`data:`, thinking it's a bad protocol. You can see it's broken on
[https://2016.boston.wordcamp.org boston.wordcamp.org], the white
rectangle should be our logo.
I've attached a patch which just adds `data` as a valid protocol, but I'm
not sure if there are any reasons we might not allow that (security comes
to mind, but if we allow any http url...?).
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/1616>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list