title: TinyMCE Editor causing ERR_BLOCKED_BY_XSS_AUDITOR in Chrome
body: <p>I am working on a site that uses a TinyMCE Editor to allow users to add and write their own content.</p>
  
  <p>Anyway, all seems okay until they try to embed a video using an <code>&lt;iframe&gt;</code> as when the form is submitted Google Chrome takes this code as malicious script and blocks the page from running, a refresh does by-pass this.</p>
  
  <p>In my headers I could change <code>X-XSS-Protection: 1; mode=block</code> to just not block XSS but this seems slightly insecure and not much of a solution.</p>
  
  <p>Is there a way to white list such things for TinyMCE Editors?</p>
  
  <p>Essentially how does WordPress and the like get around this?</p>