[wp-trac] [WordPress Trac] #34451: Embeds not working for non-WP sites

WordPress Trac noreply at wordpress.org
Fri Oct 30 10:22:29 UTC 2015


#34451: Embeds not working for non-WP sites
----------------------------------------------------+--------------------
 Reporter:  swissspidy                              |       Owner:
     Type:  defect (bug)                            |      Status:  new
 Priority:  normal                                  |   Milestone:  4.4
Component:  Embeds                                  |     Version:  trunk
 Severity:  major                                   |  Resolution:
 Keywords:  has-patch has-unit-tests needs-testing  |     Focuses:
----------------------------------------------------+--------------------

Comment (by pento):

 We need to add the class in `wp_filter_oembed_result()`, not
 `get_post_embed_html()`. (Which reminds me - the same should be happening
 for the iframe.) We don't trust classes from the embedding site, as they
 could cause clickjacking-type side effects.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34451#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list