Hi there, I have added https://www.tickcounter.com to my allowed_iframes, but this script still doesn’t appear: Nothing in the error logs as far as I can see. It also failed for a different embedded iframe from a different src domain that I allowed. The exact same sort of embedded iframe from the same src domain worked the last time I tried it, maybe 6 months or a year ago. Now I’m on Discourse v3.3.1 +5 (stable branch).

Did you add [image] rahim123: https://www.tickcounter.com or https://www.tickcounter.com/ to the allowed iframes setting?

On the latest version of the tests-passed branch, the iframe embeds without issues. Note that the style and title attributes that you have set will be stripped by Discourse. You can set width and height attributes though. For example: What do you see when you navigate to the post and then open the “elements” tab of your browser’s developer tools? [20240923_21h30m07s_grim] How about if you open the “console” tab on the developer tools? Are there any errors?

:thinking: hmmm. This seems to be working as expected for me too. admin - all site settings - allowed iframes: [Screenshot 2024-09-23 at 9.43.29 PM] previewer: [Screenshot 2024-09-23 at 9.44.44 PM] cooked post: [Screenshot 2024-09-23 at 9.47.44 PM]

Thanks a lot for the replies. [image] simon: What do you see when you navigate to the post and then open the “elements” tab of your browser’s developer tools? … [image] simon: How about if you open the “console” tab on the developer tools? Are there any errors? Hmm there are some errors: Failed to load resource: net::ERR_CONNECTION_REFUSED beacon.min.js:1 But that appears to be a DNS blacklist that I’m using. When I connect over a VPN there are no errors. And it seems more than a coincidence that a different user with a completely different computer and network originally reported this same issue to me.

OK Firefox shows me another console message: Partitioned cookie or storage access was provided to “https://www.tickcounter.com/widget/countdown/4471981” because it is loaded in the third-party context and dynamic state partitioning is enabled. [Learn more] I should also mention that I pasted the iframe code into a skeleton static HTML file and opened it in the browser and it properly loaded the iframe.

[image] rahim123: beacon.min.js:1 ok this iframe used to work for you… Are you on Cloudflare by chance? if so, perhaps take a look and see if disabling the speed brain thing does anything? (if it is enabled) I know that it is relatively new thing. [image] Enable and disable Speed Brain - Speed Brain Speed Brain is available in Cloudflare's Speed tab of the dashboard and also in the API. | Learn how Speed Brain enhances web performance by prefetching likely next pages, improving metrics like LCP and TTFB.

Hi there, no, I don’t use Cloudflare.

[image] Lilly: something is blocking it on your forum Hmm yep that’s what it looks like. But shouldn’t Discourse have an error in /logs/ ? I’m not running anything that I can think of on the server that would block that. I was using the hosting provider’s DNS in my /etc/resolv.conf, and I tried switching it to 8.8.8.8 with no change in this issue.

[image] rahim123: error in /logs/ ? only if it causes an error. something might be blocking it as a matter of proper functionality. my guess is to try to figure out if/what changed around the time this stopped working. I wonder if a Content Security Policy change could have affected it.

You seem to say that you’re using a dns block list and it’s breaking things, so don’t use it?

[regression] iframe embedding broken with allowed src domain

Product Support

Moin September 24, 2024, 6:50am 12

Did you add

https://www.tickcounter.com/ to the allowed iframes setting?

Topic		Replies	Views
Iframe not working in posts even with exception(s) in the back end Product Support	3	175	April 8, 2025
Supporting iframe embeds from different domains? Feature	57	24373	August 30, 2018
Iframes Not Working Product Support	6	1669	March 3, 2022
Iframe html being stripped from topic content Product Support	3	167	October 15, 2024
Support embedding Discourse in an iframe Feature embedding	16	8705	June 13, 2025

[regression] iframe embedding broken with allowed src domain

Related topics