Code tag still parses embeds

[rmens]

WordPress 4.7.

The 'code' block in the WordPress editor behaves incorrectly.

For example:

<code>Test Test
Another
www.google.com
http://www.google.com
https://www.youtube.com/watch?v=JHw6LTuMkNQ
Foxtrot Uniform Charlie Kilo
</code>

Displays as normal code in the wp-admin, but once published it creates an embed on the page. This should not happen and the contents of the code block should be displayed without embeds.

[rmens]

Expected output

[rmens]

Real output

[lukecavanagh]

@rmens

The YouTube link would be converted with an embed by WP automatically.

​https://codex.wordpress.org/Embeds

WordPress will automatically turn the URL into a YouTube embed and provide a live preview in the visual editor.

If you used say

<code>Test Test
Another
<a href="www.google.com">www.google.com</a>
<a href="​http://www.google.com">​http://www.google.com</a>
<a href="​https://www.youtube.com/watch?v=JHw6LTuMkNQ">​https://www.youtube.com/watch?v=JHw6LTuMkNQ</a>
Foxtrot Uniform Charlie Kilo
</code>

[lukecavanagh]

Example

[rmens]

Replying to lukecavanagh:

@rmens

The YouTube link would be converted with an embed by WP automatically.

I'm aware of this, but should that really happen inside code blocks?

[lukecavanagh]

@rmens

Not sure if having code blocks around a YouTube link would make any difference currently with the emded.

[dd32]

Agreed that this is bug-worthy, embeds should not be processed within <code> or <pre> tags if at all possible.

[SergeyBiryukov]

Also reported as a support forums issue after the upgrade to bbPress 2.x: ​#meta2469.

## Summary

Fixes #39472. URLs inside <pre> and <code> blocks are meant to be displayed as literal text, but WordPress was converting them to embeds.

This fix protects <pre> and <code> block content with placeholders before URL detection runs, then restores the original content afterward — the same placeholder approach used by wpautop() for <pre> tags.

## Changes

• src/wp-includes/class-wp-embed.php: In WP_Embed::autoembed(), extract <pre> and <code> blocks into placeholders before URL scanning, restore them after.
• tests/phpunit/tests/oembed/WpEmbed.php: Three new tests covering: URL in <pre> not embedded, URL in <code> not embedded, URL outside protected tags is still embedded.

## Test plan

• [x] Run npm run test:php -- --filter test_autoembed — all 14 tests pass
• [ ] Manually create a post with a YouTube URL inside a <code> block — confirm it renders as literal text, not an embed
• [ ] Verify a YouTube URL outside <code>/<pre> still embeds normally