Object tag being stripped by tinyMCE for YouTube links in notes

I am having a problem pasting html with <object> tags for youtube videos.
TinyMCE seems to be stripping out the tags and replacing it with empty <p>.
  • We disabled <object> elements in notes as part of other security fixes in 2.0.9, but this one may be unnecessarily restrictive. <object> elements could in theory be used to exploit a vulnerability in an installed plugin, but that's not necessarily Zotero's problem, since it'd be equivalent to a malicious object in a web page, and people should keep their plugins up-to-date.

    So we might restore this in the next version.

This is an old discussion that has not been active in a long time. Instead of commenting here, you should start a new discussion. If you think the content of this discussion is still relevant, you can link to it from your new discussion.