[wp-trac] [WordPress Trac] #30484: tinyMce is stripping out data attributes
WordPress Trac
noreply at wordpress.org
Mon Nov 24 19:45:18 UTC 2014
#30484: tinyMce is stripping out data attributes
-----------------------------+-----------------------------
Reporter: matthewdietsche | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: TinyMCE | Version: trunk
Severity: normal | Keywords:
Focuses: |
-----------------------------+-----------------------------
Data attributes are a valid part of the HTML5 spec, and shouldn't be
stripped out even for users without the "unfiltered_html" capability, so
I’m not sure why they aren't included in wp-tinymce-schema.js. Is there
something about adding a rule like "@[data-*]" that poses a security risk?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/30484>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list