Cool! Now I finally gave a reason to use Github! I was just saying to someone the other day that I was increasingly impressed by what was being done with Github and that I needed to come up with some reason to try it out. Now I have one! Thanks for setting it up.

Mikael,

Thanks for the note about how to completely disable filtering. I may consider that approach as well given that authors on our site are restricted to people I know and trust.

Thanks to both of you,
Dan

http://github.com/ceefour/embed_allower

So everybody can fork happily as necessary.

The fix: Edit wp-include/kses.php. In that file search for “Post filtering” and then comment out the following lines:

// Post filtering
//add_filter(’content_save_pre’, ‘wp_filter_post_kses’);

It’s easy and it works - But I’m glad I’m the only one using my Wordpress Mu

Given that various video sites seem to be periodically updating their embed codes and adding new parameters - and I then need to update this plugin to accommodate those new parameters - it seems a bit of a losing battle. Given that I tightly control who can post here, I’m thinking I may be better with something that just tells kses.php to leave my code alone and let it all through.

@Jeff - Thanks for the pointer to the unfiltered-mu plugin. I may take a look at it because I’ve found some more tags that I need to add in here… and so I’m wondering at what point it makes more sense to just allow *any* tags - since I have tight control over who is going to be putting up posts (mostly me!).

@Hendy - Yes, you can now say you are an open source developer! Many thanks for the work you did!

@Noli - As Ryan indicated, this plugin only allows through a subset of possible tags. To allow through JavaScript, you’d need to modify it to allow through additional tags, like the script tag. But as Ryan said, be VERY sure you want to do that because if you don’t have tight control over who is posting to your site, you could wind up with someone posting JavaScript code that could compromise your site.

@Ryan - Thanks for your various comments and the correction on the Plugin URI. It actually *was* what I put in the code, but with our column layout that wrapped to two lines so I removed the “WP” from the beginning and WPMU seems to have very helpfully modified the URL! Oops. I’ll modify the plugin text when I do an edit.

@Sugar Web Design - Very glad you found it useful!

If you do wan’t to allow script tags, you will have to use a similar technique and add them in a fashion similar to the above. You will need to use something like: $allowedposttags['script'] = array and then also add any parameters that may be in the script tag.

Dan, I expect we will be using your version of this plug-in in the near future since you have further refined the list of tags and paramaters that might become a problem.

Thank you to you both.