How can I add
<a href="javascript:function foo(){alert('hi');}" title="alert">
Drag to your bookmarks bar
</a>
to my WordPress post?
I built a bookmarklet and I want to pass it through my blog, but WordPress is stripping out the javascript from my post when I save it.
<script type="text/javascript">
<!--
// your code
//--></script>
I have no issues embedding that code in the HTML editor on my wordpress site. There is a problem with your javascript code- that defines a function, but never calls it. I have
<a href="javascript:alert('hi');" title="alert">Drag to your bookmarks bar</a>
in a post, and I get the alert when click, as well as the bookmarklet.
The issue is likely to be caused at the browser end. Chrome's XSS was the problem for me and I solved it by adding the line header ("X-XSS-Protection: 0"); to wp-blog-header.php in the root folder of my installation. This may not be ideal as it applies across the whole site. It would probably be better to add it where it would only apply to the post/page which needs to render the bookmarklet.
This is old, but still relevant with Version 4.9.5 for wordpress, so I answer with my solution for this:
Wordpress filters out any Javascript you use in your Posts or pages, that is why your code gets lost. I did the following steps to add a "javascript:" Link:
<a href="#" id="idOfYourLink">This is my JS Link</a>
jQuery(document).ready(function( $ ){
function yourFunction() {
alert("It works");
}
jQuery('#idOfYourLink').on("click", yourFunction);
});
The important part is adding the on-Handler to the Link you want to use. Now the Javascript is loaded right after the page got loaded. And a click on the link will call the function yourFunction
I guess that wordpress editor is used to work with textual data/content. So, to add your js you can find plugin for adding custom js. Also you can add a Custom field to the posts.
Let it be "custom_js" - the name of a field that would contain js code. And then edit theme post temlate, adding "echo" of custom_js.
<?php
//single.php
echo get_post_meta( get_the_ID(), 'custom_js');
?>
In the Really Simple theme (good for hard coding web page layout for simplicity), in page.php, this line sends out main page content, including the title:
get_template_part( 'template-parts/content', 'page' );
It also strips out javascript in the main page content. If you can find a good way to send back the title alone, comment this line out, and replace it with:
echo get_post_field( 'post_content', get_the_ID(), 'raw' );
This does not filter out such javascript.
As for including the title (in h1 html tags),
get_template_part( 'template-parts/content', 'title' );
works, but not quite right. It turns the title into a link.
Further looking into this matter, I found in the post_template.php file:
function the_content( $more_link_text = null, $strip_teaser = false ).
In this function, in my case, on lines 256 and 257: $content = apply_filters( 'the_content', $content ); and $content = str_replace( ']]>', ']]>', $content );.
I commented out both of these lines. That fixed it.
<script> tags and javascript content is no longer filtered out.
