[wp-trac] [WordPress Trac] #22944: Scheduled posts trigger the non-unfiltered_html filters

[WordPress Trac]

#22944: Scheduled posts trigger the non-unfiltered_html filters
-----------------------------+--------------------------
 Reporter:  Otto42           |       Type:  defect (bug)
   Status:  new              |   Priority:  normal
Milestone:  Awaiting Review  |  Component:  General
  Version:  3.5              |   Severity:  normal
 Keywords:                   |
-----------------------------+--------------------------
 To reproduce:

 * Create a post
 * Put some iframe or embed or whatever code in it, like a youtube iframe:

 {{{
 <iframe width="420" height="315"
 src="http://www.youtube.com/embed/oHg5SJYRHA0?rel=0" frameborder="0"
 allowfullscreen></iframe>
 }}}

 * Schedule the post for the future. One minute in the future will do.

 When the post publishes, the iframe will be gone.

 Something about the future-post triggers the kses filters. Since the user
 making the post (wp-cron) is unauthenticated, the unfiltered_html cap is
 not applied, and the filters engage, cleaning the post before it
 publishes.

 Problem found in 3.5. Have not checked 3.4.2 yet to see if this is a
 regression.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/22944>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software