sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Embeds: Add a CDATA and HTML comment wrapper around the JavaScript included in the embed HTML. This ensures that user agents which naively strip unwanted tags, without also stripping the content within those tages (for example, Slack), don't show the embed as a mess of JavaScript.

Browse Source 
Props peterwilsoncc.

Fixes #34429.



git-svn-id: https://develop.svn.wordpress.org/trunk@35406 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Gary Pendergast 2015-10-26 23:54:04 +00:00
parent c608146996
commit 9387dff5af
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/wp-includes/embed-functions.php
View File

@ -466,6 +466,7 @@ function get_post_embed_html( $post = null, $width, $height ) {
$embed_url = get_post_embed_url( $post );
$output = "<script type='text/javascript'>\n";
$output .= "<!--//--><![CDATA[//><!--\n";
if ( SCRIPT_DEBUG ) {
$output .= file_get_contents( ABSPATH . WPINC . '/js/wp-embed.js' );
} else {
@ -483,6 +484,7 @@ function get_post_embed_html( $post = null, $width, $height ) {
include "js/wp-embed.min.js"
JS;
}
$output .= "\n//--><!]]>";
$output .= "\n</script>";
$output .= sprintf(