[wp-trac] [WordPress Trac] #30484: tinyMce is stripping out data attributes

WordPress Trac noreply at wordpress.org
Mon Nov 24 19:45:18 UTC 2014


#30484: tinyMce is stripping out data attributes
-----------------------------+-----------------------------
 Reporter:  matthewdietsche  |      Owner:
     Type:  defect (bug)     |     Status:  new
 Priority:  normal           |  Milestone:  Awaiting Review
Component:  TinyMCE          |    Version:  trunk
 Severity:  normal           |   Keywords:
  Focuses:                   |
-----------------------------+-----------------------------
 Data attributes are a valid part of the HTML5 spec, and shouldn't be
 stripped out even for users without the "unfiltered_html" capability, so
 I’m not sure why they aren't included in wp-tinymce-schema.js.  Is there
 something about adding a rule like "@[data-*]" that poses a security risk?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30484>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list