6.3.4.3. Quick Fixes Section

6.3.4.3.2. Convert iframe elements to short code

WordPress does not allow iframe elements for security reasons. If you want to show iframes in the post template, you can check this. When you check this, the iframe elements in the short code data will be converted to [wpcc-iframe] short code that shows iframes in the front end.

Important

Use this with caution since unknown iframes can cause security vulnerabilities. The short code will output the HTML element only for the domains defined in Allowed domains for iframe short code setting.

For more information, please refer to Short Codes Section.

6.3.4.3.3. Convert script elements to short code

WordPress does not allow script elements for security reasons. If you want to show scripts in the post template, you can check this. When you check this, script elements in the short code data will be converted to [wpcc-script] short code that shows scripts in the front end.

Important

Use this with caution since unknown scripts can cause security vulnerabilities. The short code will output the HTML element only for the domains defined in Allowed domains for script short code setting.

For more information, please refer to Short Codes Section.

6.3.4.3.4. Embed social media posts and other media

Check this if you want to display social media posts and other media such as audio and video on the front end. When this is checked, HTML code that is considered dangerous by WordPress will be tried to be safely converted to short codes, which makes social media posts, iframe elements from trusted domains, and HTML5 video and audio players display correctly on the front end.

The media that are added as a non-iframe element (such as the media from Imgur, Instagram, TikTok, Tumblr, and Twitter), the media that are added via iframe elements and that are trusted by WordPress, and all the source elements are automatically embedded when you enable this setting. The plugin will convert all the iframe elements to [wpcc-iframe] short code. If the source of the iframe element is not already trusted by WordPress, you can allow the source by using Allowed domains for iframe short code setting. The pre-configured trusted domains include 70+ domains such as the domains of Instagram, Facebook, Amazon, YouTube, Twitter, Scribd, Vimeo, Pinterest, Spotify, Meetup, and so on.

6.3.4.3.5. Remove empty HTML elements and comments

Check this if HTML elements that do not have any content and comments in the HTML code should all be removed from all parts of the post. This does not remove the elements that should not have any content by default, such as img elements.

For example, if this is checked, the following code

<!-- This is a comment -->
<div><p></p></div><p>This is an example.<br><img src="http://dummy.url"><a href="#"></a>

will be turned into the following:

<p>This is an example.<br><img src="http://dummy.url"></p>

6.3.4.3.6. Remove scripts

Check this if you want to remove scripts from all parts of the post. This removes script elements as well as HTML attributes that can store JavaScript code, such as onclick.

For example, if this is checked, the following code

<script type="text/javascript">var x = 3;</script>
<p onclick="showPopup()">This is an <a href="#" onmouseover="redirect()">example</a>.</p>

will be turned into the following:

<p>This is an <a href="#">example</a>.</p>