I noticed the onebox for my website stopped working on the discourse forum I am visiting. It was working in 1.8.x but now the forum has been updated to 1.9.3 and my oneboxes are no longer working. I checked on try.discource.org and it is the same. The onebox urls look like this: Avg Speed 0kph, Distance 0.0km, Energy 1Wh https://metr.at/r/CF1go My website returns following oembed { "version":"1.0", "type":"rich", "width":600, "height":400, "title":"metr", "html":" ", "provider_name":"metr.at", "provider_url":"https://metr.at" } I went through commit history in onebox github and found 407fd0b8d6d41956e2400efc1918ace255aecd37 “Security: sandbox iframes, add rel to abs anchors” Can it be that my onebox fails because of iframe and security? Is there something I can do?

I think I found the problem https://github.com/discourse/discourse/commit/d6b22e6cc1b19a5279774fbe3a0138caca7918ea do I understand right, the iframe will not be oneboxed unless whitelisted in the forum settings?

I suspect that it is the iframe. Can you remove it?

I can not remove the iframe because the whole onebox is the iframe. If I remove it, there will be nothing left.

[image] rpasichnyk: I went through commit history in onebox github and found 407fd0b8d6d41956e2400efc1918ace255aecd37 “Security: sandbox iframes, add rel to abs anchors” Discourse 1.8 uses onebox 1.8.12 and the commit you referenced was already part of that version. So, it must be something else. If your problem is caused by changes to the onebox gem, it should be one of the 79 commits: https://github.com/discourse/onebox/compare/e9164ee70186f87d2f2197de37a3a43f1274a060...master

iframely is totally happy by the way Iframely URL Debugger - Open Graph, Twitter Cards, oEmbed

[image] rpasichnyk: the iframe will not be oneboxed unless whitelisted in the forum settings? That’s exactly right :+1:

Rich onebox stopped working

Product Support

zogstrip (Régis HANOL) February 12, 2018, 4:49pm 7

That’s exactly right

Topic		Replies	Views
Iframe onebox has stopped working Product Support	8	1905	May 13, 2019
Quickly explain what Onebox is? UX	12	12215	July 3, 2026
Onebox shown as iframe raw html Bug	6	1311	July 10, 2017
Did onebox change? They're not showing for my main site any longer Product Support	6	1506	June 6, 2017
Some onebox don't work but pass the iframely test Product Support	11	1844	January 26, 2017

Rich onebox stopped working

Related topics