[wp-trac] [WordPress Trac] #10337: Easier embeds for 2.9 (oEmbed perhaps?)
WordPress Trac
wp-trac at lists.automattic.com
Fri Dec 18 11:47:30 UTC 2009
#10337: Easier embeds for 2.9 (oEmbed perhaps?)
-------------------------------------+--------------------------------------
Reporter: ryan | Owner: Viper007Bond
Type: task (blessed) | Status: closed
Priority: normal | Milestone: 2.9
Component: Shortcodes | Version:
Severity: normal | Resolution: fixed
Keywords: has-patch needs-testing |
-------------------------------------+--------------------------------------
Comment(by Viper007Bond):
Replying to [comment:78 otto42]:
> Of course not, that would be insane. But there's got to be a better way
than whitelisting. Even doing something like stripping out script tags by
default would be a better solution.
I thought about that, but a lotta sites do their embeds using Javascript.
And even `<object>` itself can be bad (there's a reason none of that stuff
is allowed on WordPress.com for example).
--
Ticket URL: <http://core.trac.wordpress.org/ticket/10337#comment:79>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list