6758 pointsCommunity rank #8Supreme DeityWPMU DEV StaffLifetime member
Developer
(joined June 2008)
Likes (0)
It's looking for the "unfiltered_html" capability to allow code in the widget that kses doesn't remove. There is an unfiltered_html plugin available on wordpress.org i think (can't find link at the mo) that adds this capability - or you could use the role manager plugin to add that capability to the user account you want to
Thanks, I will check it out.
I did some further research on the issue and it was a eye opener.
On the security implications of allowing users to insert their own JavaScript in relation to session cookie hijacking. Sounds kinda scary.
I may try the unfiltered html plugin on a per user basis.
Responses (3)
Sales & Support Pro (joined March 2010) Likes (0)
Hi Jozwikjp!
I believe this may be to do with the difference in Super Admin and Blog Admin.
Try upgrading to 3.1 - I have a feeling the way permissions are dished out has changed in 3.1 to work a bit better.
Phil
Developer (joined June 2008) Likes (0)
It's looking for the "unfiltered_html" capability to allow code in the widget that kses doesn't remove. There is an unfiltered_html plugin available on wordpress.org i think (can't find link at the mo) that adds this capability - or you could use the role manager plugin to add that capability to the user account you want to
Member (joined August 2010) Likes (0)
Thanks, I will check it out.
I did some further research on the issue and it was a eye opener.
On the security implications of allowing users to insert their own JavaScript in relation to session cookie hijacking. Sounds kinda scary.
I may try the unfiltered html plugin on a per user basis.
Thank you.
Become a member