[wp-trac] [WordPress Trac] #58227: JavaScript can be entered as an image description

[WordPress Trac]

#58227: JavaScript can be entered as an image description
--------------------------+------------------------------
 Reporter:  Presskopp     |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Media         |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  2nd-opinion   |     Focuses:
--------------------------+------------------------------

Comment (by Otto42):

 Replying to [comment:2 Presskopp]:
 > But why should it be allowed for an editor to enter JS there?

 Because the Editor is the most powerful user of the site. They're there to
 edit the content. They need the ability to edit the content to anything
 they want. That's their job.

 A lot of people get confused because they think that it's a hierarchy from
 Admin all the way down to Subscriber. It's not. Admins are not above
 editors. They're on an equal level. Admins have more ability to manage the
 site, but from the terms of being able to post content, they're absolutely
 equals with Editor.

 Think of it like The Daily Planet. You have Clark Kent and Lois Lane. They
 are authors. You have Jimmy Olsen, who's a lowly contributor. Submitting
 his photos, but not being able to caption them the way he likes. And then
 you have Perry White. He's the editor, the man in charge. He makes the
 final decision about what appears in the paper or does not. Or does he?

 Down in the bowels of the building, the guy workin on the printing press
 and typesetting everything is the true man in charge. He fixes the
 printing press when it is broken. He handles the typesetting. And by
 extension, he could, in theory, put anything he wanted into the paper. He
 might not have a job tomorrow, but he could. This is the true most
 powerful person in the building... excluding Clark. This is the admin. He
 has this power because he needs this power to fix problems. In the end,
 there is always someone who wields ultimate power, because there must be.

 However, the editor is in charge during normal operation. He decides what
 is printed in the paper. Or, in this case, on the website. I don't think
 the analogy fully extends to javascript code, but you use whatever you
 want there. And you can make the case that such script code is not needed
 for descriptions, but then you always run into cases where, if you turn it
 off, people are going to complain because it breaks their site. Somebody
 is always doing things weirdly.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58227#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform