[wp-trac] [WordPress Trac] #20094: The wpEditImage TinyMCE plugin is broken when TinyMCE is served from another doain

[WordPress Trac]

#20094: The wpEditImage TinyMCE plugin is broken when TinyMCE is served from
another doain
--------------------------+-------------------------------------
 Reporter:  mdawaffe      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  TinyMCE       |    Version:  2.6
 Severity:  normal        |   Keywords:  has-patch needs-testing
--------------------------+-------------------------------------
 If TinyMCE is served from another domain (for example a CDN), the
 wpEditImage plugin tries to open the image editing iframe from that other
 domain.  This breaks inter-iframe communication due to a violation in the
 same-origin policy.

 The code is the same all the way back to 2.6, but I didn't verify the
 problem occurs there (TinyMCE's API may have changed since then).

 Attached:
 * Ensures the iframe is always served from the same origin as the parent
 page.
 * Fixes the iframe cache busting.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20094>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software