Changeset 35406

Timestamp:

10/26/2015 11:54:04 PM (9 years ago)

Author:

pento

Message:

Embeds: Add a CDATA and HTML comment wrapper around the JavaScript included in the embed HTML. This ensures that user agents which naively strip unwanted tags, without also stripping the content within those tages (for example, Slack), don't show the embed as a mess of JavaScript.

Props peterwilsoncc.

Fixes #34429.

File:

• trunk/src/wp-includes/embed-functions.php (modified) (2 diffs)

trunk/src/wp-includes/embed-functions.php

@@ -467 +467 @@
 
     $output = "<script type='text/javascript'>\n";
+    $output .= "<!--//--><![CDATA[//><!--\n";
     if ( SCRIPT_DEBUG ) {
         $output .= file_get_contents( ABSPATH . WPINC . '/js/wp-embed.js' );
@@ -484 +485 @@
 JS;
     }
+    $output .= "\n//--><!]]>";
     $output .= "\n</script>";