How dangerous are EMBED tags

  • jephperro

    (@jephperro)


    16 years, 9 months ago

    Hi,

    I currently run several WordPress MU installations.

    My users are asking for the ability to post video (not just Youtube, but from our own Flash Media Server).

    How dangerous is the embed tag and should I worry about giving them the ability? I would never allow users to include PHP or JavaScript in their posts, do I have to worry about Flash vulnerabilities?

    Some of the video plugins out there are not very user friendly and require strange tags to insert video. Something like this:
    [flv:url width height]

    However, this plugin in particular would do everything my users are asking for:
    http://wpmudev.org/project/Allow-Embedded-Videos/

    What kind of risk am I taking by activating a plugin that allows <embed>?

    Thanks

The topic ‘How dangerous are EMBED tags’ is closed to new replies.