[wp-trac] [WordPress Trac] #32522: oEmbed WordPress Posts in WordPress Posts

[WordPress Trac]

#32522: oEmbed WordPress Posts in WordPress Posts
-------------------------+------------------------------
 Reporter:  melchoyce    |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  Embeds       |     Version:
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:  administration
-------------------------+------------------------------

Comment (by pento):

 > This would probably cause an uptick in people coding ways to break
 iframes (X-FRAME-OPTIONS or JS at this point).

 I don't think we'd try to prevent X-FRAME-OPTIONS, that's a good way for
 someone to forcibly prevent their site from being embedded.

 Because we don't really want to allow frame-busting, we could combine the
 `sandbox` attribute for modern browsers, and the `security` attribute for
 IE6+, to prevent JS from running in the iframe. (This would also prevent
 someone from showing their AdSense on a site they've been embedded on).

 Of course, there's almost always a technical solution to every technical
 problem. This doesn't solve the issues of consent and trust, I absolutely
 agree that we should be discussing these.

 The first feature chat will be on Monday (21:00UTC, 17:00EDT), there'll be
 a make/core post going up before then. If everyone is amenable to this, we
 should take a few days to think about these bigger issues, leave any
 comments on the make/core post that you'd like, then we can discuss it
 during the chat.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32522#comment:39>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform