inside it. That is exactly the capability WordPress * gates behind unfiltered_html, so the attribute is filtered here against the * POST AUTHOR's capability before it is ever handed to the frontend. An author * who may not publish unfiltered HTML gets a wp_kses_post() copy, which has no *