Changeset 35577 for trunk/src/wp-includes/embed-functions.php

Timestamp:

11/09/2015 12:07:03 AM (11 years ago)

Author:

pento

Message:

Embeds: Fix support for embedding in non-WordPress sites.

This moves the last of the iframe message code from PHP to JavaScript, so it can be included in any site, without needing to rely on any of WordPress' internal behaviour.

Props swissspidy.

Fixes #34451.

File:

• trunk/src/wp-includes/embed-functions.php (modified) (5 diffs)

trunk/src/wp-includes/embed-functions.php

@@ -461 +461 @@
     $embed_url = get_post_embed_url( $post );
 
-    $output = '<blockquote><a href="' . get_permalink( $post ) . '">' . get_the_title( $post ) . "</a></blockquote>\n";
+    $output = '<blockquote class="wp-embedded-content"><a href="' . esc_url( get_permalink( $post ) ) . '">' . get_the_title( $post ) . "</a></blockquote>\n";
 
     $output .= "<script type='text/javascript'>\n";
@@ -755 +755 @@
     $allowed_html = array(
         'a'          => array(
-                    'href' => true,
+            'href'         => true,
         ),
         'blockquote' => array(),
@@ -767 +767 @@
             'scrolling'    => true,
             'title'        => true,
-            'class'        => true,
         ),
     );
@@ -783 +782 @@
         // We have a blockquote to fall back on. Hide the iframe by default.
         $html = str_replace( '<iframe', '<iframe style="display:none;"', $html );
-    }
-
-    $html = str_replace( '<iframe', '<iframe sandbox="allow-scripts" security="restricted"', $html );
+        $html = str_replace( '<blockquote', '<blockquote class="wp-embedded-content"', $html );
+    }
+
+    $html = str_replace( '<iframe', '<iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted"', $html );
 
     preg_match( '/ src=[\'"]([^\'"]*)[\'"]/', $html, $results );
@@ -957 +957 @@
  */
 function _oembed_filter_feed_content( $content ) {
-    return str_replace( '<iframe sandbox="allow-scripts" security="restricted" style="display:none;"', '<iframe sandbox="allow-scripts" security="restricted"', $content );
-}
+    return str_replace( '<iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="display:none;"', '<iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted"', $content );
+}