subtitles added to media are stripped for anyone without unfiltered_html capability

[jwenerd]

If you are an author (or an editor or administrator on multisite) you are able to insert a video, add a subtitle track which inserts the track element within the video shortcode. Then when saving the post the track is removed due to it not being in the list of allowed post tags.

[jwenerd]

Patch that adds track and permissible attributes to allowed tags

[wonderboymusic]

should we allow <audio> and <video> in the list as well? <track> is a sub-element of them, so probably? someone with knowledge of this KSES file weigh in?

[westi]

Replying to wonderboymusic:

should we allow <audio> and <video> in the list as well? <track> is a sub-element of them, so probably? someone with knowledge of this KSES file weigh in?

That makes sense to me, we need to try and keep the file consistent by adding support for tags in there groupings rather than individual tags alone.

[westi]

@wonderboymusic the patch looks good (although a little bit of me dies when I see autoplay=true ;))

[wonderboymusic]

In 30064:

Add audio, video, and track to $allowedposttags (KSES).

Props jwenerd, wonderboymusic.
Fixes #29826.

[peterwilsoncc]

In 47837:

KSES: Support the video element's playsinline attribute.

Allow users without the unfiltered_html capability to use the playsinline attribute when embedding videos.

Additionally this adds unit tests for passing the video element through kses.

Fixes #50167. See #29826.