[wp-trac] [WordPress Trac] #36755: Native oEmbed support on Custom Post Types produces Cross-site scripting errors or are not rendered at all.

WordPress Trac noreply at wordpress.org
Thu May 5 01:57:33 UTC 2016


#36755: Native oEmbed support on Custom Post Types produces Cross-site scripting
errors or are not rendered at all.
-------------------------------+------------------------------
 Reporter:  webdevmattcrom     |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  TinyMCE            |     Version:  4.5.1
 Severity:  normal             |  Resolution:
 Keywords:  needs-screenshots  |     Focuses:  javascript
-------------------------------+------------------------------
Changes (by DrewAPicture):

 * keywords:   => needs-screenshots
 * focuses:   => javascript
 * component:  Posts, Post Types => TinyMCE


Comment:

 Replying to [ticket:36755 webdevmattcrom]:
 > STEPS TO REPRODUCE
 > <snip>
 > * Try to embed that post on a page/post
 >
 > Results have varied. For some it won't render as an oEmbed at all. For
 some there are cross-site scripting errors. I have gotten it to render
 correctly locally, but not on a live site.

 To be clear: The problem strictly extends to the embed view not rendering
 correctly in the visual editor, correct?

 Also, screenshots would be useful here.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36755#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list