You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Dec 15, 2022. It is now read-only.
Some themes or plugins (looking at you Envato), cause arbitrary HTML in the header and footer and it bleeds into the sandboxed iframe...
Where possible, just test your themes and plugins and then fix (if necessary, then in a child-theme)
Whilst it is possible to strip incoming HTML tags not whitelisted, it seems a waste of time and effort for me (by all means PR something that handles this).