Project

General

Profile

Actions
Copy link

Bug #2941

closed

wordpress content filtering

Added by Keith Miyake about 11 years ago. Updated about 11 years ago.

Status:
Rejected
Priority name:
Normal
Assignee:
-
Category name:
-
Target version:
-
Start date:
2013-12-19
Due date:
% Done:

0%

Estimated time:
Deployment actions:

Description

Wordpress is filtering content from pages/posts including some advanced css styles (such as box-shadow) and all <script> tags. Is it possible to disable this filtering or otherwise allow custom javascript to be included within a page? Not a big issue as I can modify the theme directly, but it is nice to have the flexibility to just do some quick edits from within a page's content.

FWIW, I'm only using the text editing mode and not the visual editor, and the post content works fine (isn't filtered) on my local instance.

Thanks!

Actions
Copy link
 #1

Updated by Boone Gorges about 11 years ago

  • Status changed from New to Rejected

Hi Keith. The filtering you've experienced is a security precaution. We only allow a subset of CSS and no JS inline in posts, because either of these items could be used for various XSS attacks. (You probably didn't see this in your local installation because it only kicks in automatically when Multisite is activated.) I'm afraid it won't be possible to lift the restrictions globally. It may be possible for me to do so on a local basis, but since you are providing me with a theme anyway, I think it's easiest if you put it into the theme files.

Actions
Copy link

Also available in: Atom PDF