[wp-trac] Re: [WordPress Trac] #4667: Text alignment problem with TinyMCE ("style" attribute not allowed with "p" tag in kses.php)

WordPress Trac wp-trac at lists.automattic.com
Tue Jul 24 15:33:13 GMT 2007


#4667: Text alignment problem with TinyMCE ("style" attribute not allowed with "p"
tag in kses.php)
--------------------------+-------------------------------------------------
 Reporter:  dreamer12345  |        Owner:  anonymous
     Type:  defect        |       Status:  closed   
 Priority:  normal        |    Milestone:  2.2.2    
Component:  TinyMCE       |      Version:  2.2.1    
 Severity:  normal        |   Resolution:  invalid  
 Keywords:                |  
--------------------------+-------------------------------------------------
Changes (by Otto42):

  * status:  new => closed
  * resolution:  => invalid

Comment:

 This is not a bug, it's intentional. Styles are not allowed for users
 without the unfiltered_html capability because they could use
 position:absolute styles and such and overwrite other elements of the
 page. Allowing style attributes is, in essence, a security risk.

 Now, if you have the unfiltered_html capability (as the admin user
 should), then you can add style attributes all you like. kses does not get
 invoked for users with unfiltered_html.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4667#comment:1>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list