[wp-meta] [Making WordPress.org] #1616: Remote CSS: Allow data URIs in CSS properties

Making WordPress.org noreply at wordpress.org
Fri Mar 4 23:45:36 UTC 2016


#1616: Remote CSS: Allow data URIs in CSS properties
--------------------------+-----------------------
 Reporter:  ryelle        |      Owner:
     Type:  defect        |     Status:  new
 Priority:  normal        |  Milestone:
Component:  wordcamp.org  |   Keywords:  has-patch
--------------------------+-----------------------
 I'm using the Remote CSS feature for WordCamp Boston. I'd like to use SVGs
 for background images, encoded directly into the CSS file using [https
 ://css-tricks.com/data-uris/ data-uris]. Unfortunately, the sanitization
 for URLs in the `jetpack-tweaks` sees this value as a URL, and strips
 `data:`, thinking it's a bad protocol. You can see it's broken on
 [https://2016.boston.wordcamp.org boston.wordcamp.org], the white
 rectangle should be our logo.

 I've attached a patch which just adds `data` as a valid protocol, but I'm
 not sure if there are any reasons we might not allow that (security comes
 to mind, but if we allow any http url...?).

--
Ticket URL: <https://meta.trac.wordpress.org/ticket/1616>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list