[ CTAブロック ] ホワイトリストのURLのみiframeがエスケープされてしまうのを修正しました

inc/call-to-action/package/block/index.php

@@ -273,5 +273,53 @@ function veu_cta_block_callback( $attributes, $content ) {
 		}
 	}
 
-	return wp_kses_post( $content );
+	return veu_cta_block_safe_kses_post( $content );
+}
+
+// ksesから特定のiframeを除外
+function veu_allow_custom_iframes( $tags, $context ) {
+	if ( $context ) {
+		$tags['iframe'] = array(
+			'src'             => true,
+			'width'           => true,
+			'height'          => true,
+			'style'           => true,
+			'allowfullscreen' => true,
+			'loading'         => true,
+			'sandbox'         => true,
+		);
+	}
+	return $tags;
+}
+
+function veu_cta_block_safe_kses_post( $content ) {
+	$allowed_iframe_patterns = array(
+		'/https:\/\/(www\.)?google\.com\//i',   // Google Maps
+		'/https:\/\/(www\.)?youtube\.com\//i', // YouTube
+		'/https:\/\/www\.openstreetmap\.org\//i', // OpenStreetMap
+		'/https:\/\/player\.vimeo\.com\//i', // Vimeo
+	);
+
+	preg_match_all( '/<iframe.*?src=["\'](.*?)["\'].*?>.*?<\/iframe>/i', $content, $matches );
+
+	$allowed_iframes = array();
+
+	foreach ( $matches[1] as $index => $iframe_src ) {
+		foreach ( $allowed_iframe_patterns as $pattern ) {
+			if ( preg_match( $pattern, $iframe_src ) ) {
+				$allowed_iframes[ $matches[0][ $index ] ] = $matches[0][ $index ]; // 元の `iframe` タグを保存
+				break;
+			}
+		}
+	}
+
+	add_filter( 'wp_kses_allowed_html', 'veu_allow_custom_iframes', 10, 2 );
+	$content = wp_kses_post( $content );
+	remove_filter( 'wp_kses_allowed_html', 'veu_allow_custom_iframes', 10, 2 );
+
+	foreach ( $allowed_iframes as $original_iframe ) {
+		$content = str_replace( '[iframe-placeholder]', $original_iframe, $content );
+	}
+
+	return $content;
 }

readme.txt

@@ -81,6 +81,7 @@ e.g.
 
 == Changelog ==
 
+[ Bug fix ][ CTA ] Fixed iframes escaping only whitelisted URLs
 [ Design Bug Fix ][ Share button ]Resolved an issue where `gap` in the `.veu_socialSet` component was not applying proper spacing between elements.
 [ Specification change ] Fixed the zoom-out toggle not always displaying in the editor toolbar (updated blocks.json API version from 2 to 3).