Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #43021, comment 1


Ignore:
Timestamp:
01/05/2018 10:10:32 AM (6 years ago)
Author:
danieltj
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #43021, comment 1

    initial v1  
    11This is by design. On single sites, admins and editors have the capability to post unfiltered HTML in various places within the WordPress dashboard (including comment replies etc). In multi-sites, only super admins can post unfiltered HTML. Here is a link to [https://codex.wordpress.org/Roles_and_Capabilities#unfiltered_html the Codex] about the capability.
     2
     3Thanks for reporting this though. In future, any potential security reports should be [https://hackerone.com/wordpress posted to HackerOne].