Make WordPress Core

Opened 5 years ago

Last modified 5 years ago

#49731 new defect (bug)

Display embeds in WordPress plugin descriptions

Reported by: dd32's profile dd32 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Plugins Keywords:
Focuses: administration Cc:

Description (last modified by dd32)

The WordPress.org plugin directory supports two shortcode embeds (specifically [youtube and [vimeo) and several oembed locations.

Most of these embeds appear to return iframe elements, which are removed by Core, see $plugins_allowedtags.

For example, the Updraft Plus plugin has an embed on the WordPress.org site, but not within the WordPress Add new plugin screen.
If you have Jetpack installed, it appears that it converts the iframe into a shortcode and displays that instead.

This was originally reported as #meta2846, see that ticket for an example of the HTML that's stripped by this behaviour.

Change History (2)

#1 @dd32
5 years ago

  • Description modified (diff)

#2 @dd32
5 years ago

  • Description modified (diff)
Note: See TracTickets for help on using tickets.