Opened 2 years ago
Closed 14 months ago
#16713 closed defect (bug) (duplicate)
Wordpress removes title attribute from images
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Formatting | Version: | 3.1 |
| Severity: | normal | Keywords: | dev-feedback has-patch |
| Cc: | mattward41@… |
Description
For everyone apart from super-admin users, WordPress will remove a title attribute defined in an <img> tag. This is because it's not defined in the /wp-includes/kses.php file as being a valid attribute for <img>.
It may be that WordPress doesn't consider title to be a valid attribute (even though it's a standard W3C HTML attribute) which is fine, but WordPress also provides an input box for the title in the image editing popup, which adds the title attribute to the <img> tag, which then doesn't save for anyone other than a super-admin user (even though all users can save a value in that box).
Attachments (2)
Change History (9)
solarissmoke — 2 years ago
comment:2
solarissmoke — 2 years ago
- Component changed from General to Formatting
- Keywords dev-feedback added; needs-patch removed
+1 . We've run into this recently and wonder if this will be implemented. thanks!
- Milestone changed from Awaiting Review to 3.4
- Owner set to westi
- Status changed from new to accepted
Going to look into this.

Patch adds title to allowed img attributes.
However, the title attribute is allowed anywhere in HTML. Is there any reason why we can't tell kses to allow it on all elements? I can't see any security reason not to let authors use title attributes wherever they like. Something like 16713.2 maybe.