[wp-trac] [WordPress Trac] #34451: Embeds not working for non-WP sites

[WordPress Trac]

#34451: Embeds not working for non-WP sites
----------------------------------------------------+--------------------
 Reporter:  swissspidy                              |       Owner:
     Type:  defect (bug)                            |      Status:  new
 Priority:  normal                                  |   Milestone:  4.4
Component:  Embeds                                  |     Version:  trunk
 Severity:  major                                   |  Resolution:
 Keywords:  has-patch has-unit-tests needs-testing  |     Focuses:
----------------------------------------------------+--------------------

Comment (by swissspidy):

 Replying to [comment:5 pento]:
 > We need to add the class in `wp_filter_oembed_result()`, not
 `get_post_embed_html()`. (Which reminds me - the same should be happening
 for the iframe.) We don't trust classes from the embedding site, as they
 could cause clickjacking-type side effects.
 >

 Even better to add it in both places, so it works for non-WP sites. Will
 whip up a new patch. Anything else?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34451#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform