From 1df1727e5560be27b4d051b73a9239918d6ae5ba Mon Sep 17 00:00:00 2001 From: Mark Jaquith Date: Sun, 14 Apr 2013 01:21:47 +0000 Subject: [PATCH] Only say we accept a raw video/audio embed code for unfiltered_html users. props wonderboymusic. see #23961 git-svn-id: https://develop.svn.wordpress.org/trunk@23985 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-admin/includes/post-formats.php | 14 ++++++++++++-- wp-admin/includes/post.php | 8 ++++++-- 2 files changed, 18 insertions(+), 4 deletions(-) diff --git a/wp-admin/includes/post-formats.php b/wp-admin/includes/post-formats.php index 5bd89ea64b..0364f5d416 100644 --- a/wp-admin/includes/post-formats.php +++ b/wp-admin/includes/post-formats.php @@ -69,7 +69,12 @@ $format_meta = get_post_format_meta( $post_ID ); ?> - +
- +
diff --git a/wp-admin/includes/post.php b/wp-admin/includes/post.php index 73a1a7261a..1b5ff0ea60 100644 --- a/wp-admin/includes/post.php +++ b/wp-admin/includes/post.php @@ -203,8 +203,12 @@ function edit_post( $post_data = null ) { $format_keys = array( 'quote', 'quote_source', 'image', 'gallery', 'audio', 'video' ); foreach ( $format_keys as $key ) { - if ( isset( $post_data[ '_wp_format_' . $key ] ) ) - update_post_meta( $post_ID, '_wp_format_' . $key, wp_filter_post_kses( $post_data[ '_wp_format_' . $key ] ) ); + if ( isset( $post_data[ '_wp_format_' . $key ] ) ) { + if ( current_user_can( 'unfiltered_html' ) ) + update_post_meta( $post_ID, '_wp_format_' . $key, $post_data[ '_wp_format_' . $key ] ); + else + update_post_meta( $post_ID, '_wp_format_' . $key, wp_filter_post_kses( $post_data[ '_wp_format_' . $key ] ) ); + } } // Meta Stuff