Make WordPress Core

Opened 11 years ago

Closed 11 years ago

Last modified 11 years ago

#14174 closed defect (bug) (invalid)

Network users unable to embed objects / scripts into editor

Reported by: firmdot Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Editor Keywords:
Focuses: Cc:


WordPress 3.0 with Network enabled, blog users (even with administrative privileges - but not Network Administrators) are unable to paste/embed objects into the Editor (even with HTML tab selected).

To re-create the problem - login into WordPress with any user privileges other than Network Administrator, create a new Post in HTML mode, then Publish it. Then Edit the post and paste object code such as flash from YouTube. Click Update. Upon saving/updating the code will be removed from the editor window.

Users with Network Administrator privileges are able to embed objects.

Change History (4)

#1 @nacin
11 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Severity changed from blocker to normal
  • Status changed from new to closed

Only super admins are given the ability to use unfiltered HTML.

This explanation says why the capability is dangerous. Note that it only applies to multisite.

There is a plugin, http://wordpress.org/extend/plugins/unfiltered-mu/. I just reported a typo in it to Donncha yesterday, and he replied that it might not work with 3.0. But nonetheless, that's the solution.

#2 @nacin
11 years ago

Note that it only applies to multisite.

Should instead say -- Note that the explanation does not mention the difference in how multisite works, in that only super admins get it there.

#3 @firmdot
11 years ago

It doesn't work with 3.0

#4 @donncha
11 years ago

The development version of unfiltered_mu should now work with WordPress 3.0. It uses the map_meta_cap filter to add the capability back in.

Note: See TracTickets for help on using tickets.