From 9387dff5afcf7cd6e7a6f48665ee4f16233a60c1 Mon Sep 17 00:00:00 2001
From: Gary Pendergast <pento@git.wordpress.org>
Date: Mon, 26 Oct 2015 23:54:04 +0000
Subject: [PATCH] Embeds: Add a CDATA and HTML comment wrapper around the
 JavaScript included in the embed HTML. This ensures that user agents which
 naively strip unwanted tags, without also stripping the content within those
 tages (for example, Slack), don't show the embed as a mess of JavaScript.

Props peterwilsoncc.

Fixes #34429.



git-svn-id: https://develop.svn.wordpress.org/trunk@35406 602fd350-edb4-49c9-b593-d223f7449a82
---
 src/wp-includes/embed-functions.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/wp-includes/embed-functions.php b/src/wp-includes/embed-functions.php
index 7e90221874..3fe4e1ad22 100644
--- a/src/wp-includes/embed-functions.php
+++ b/src/wp-includes/embed-functions.php
@@ -466,6 +466,7 @@ function get_post_embed_html( $post = null, $width, $height ) {
 	$embed_url = get_post_embed_url( $post );
 
 	$output = "<script type='text/javascript'>\n";
+	$output .= "<!--//--><![CDATA[//><!--\n";
 	if ( SCRIPT_DEBUG ) {
 		$output .= file_get_contents( ABSPATH . WPINC . '/js/wp-embed.js' );
 	} else {
@@ -483,6 +484,7 @@ function get_post_embed_html( $post = null, $width, $height ) {
 		include "js/wp-embed.min.js"
 JS;
 	}
+	$output .= "\n//--><!]]>";
 	$output .= "\n</script>";
 
 	$output .= sprintf(