# Add WhiteListIframe embed of everycircuit.com

**URL:** https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954
**Category:** Support
**Created:** [7월 27, 2017, 7:44오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954 "2017-07-27T19:44:04Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [7월 27, 2017, 7:44오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/1 "2017-07-27T19:44:04Z")

</div>

![et2](https://global.discourse-cdn.com/meta/original/3X/8/3/831522635869cb00fdebfdb229cd83b86076e356.jpg)

 ![et1](https://global.discourse-cdn.com/meta/original/3X/a/0/a0e45e11db76084ad5d5da7bed694b23dd976c19.jpg)

```
  <a href="http://everycircuit.com/circuit/5222925563068416">Push-Pull Boot Converter - EveryCircuit</a><br>
    <iframe width="560" height="360" src="http://everycircuit.com/embed/5222925563068416" frameborder="0"></iframe>

```

I add url line see from history [Plugin whitelist iframe](https://github.com/Permpol/whitelist-iframe/commits/master/assets/javascripts/lib/discourse-markdown/whitelist-iframe.js.es6) but can not work. How should I fix it?

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [7월 27, 2017, 10:08오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/2 "2017-07-27T22:08:26Z")

</div>

The API for whitelisting iframes is a mess.

I will fix it, it is on my list.

---

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [7월 28, 2017, 2:38오전 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/3 "2017-07-28T02:38:43Z")

</div>

thank you very much.

---

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [7월 31, 2017, 1:24오전 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/4 "2017-07-31T01:24:16Z")

</div>

I tried use http. It work. But url embed of [everycircuit.com](http://everycircuit.com) is http only. How to fix it to work my website.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [9월 1, 2017, 2:33오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/5 "2017-09-01T14:33:28Z")

</div>

API is no longer a mess per:

[https://github.com/discourse/discourse/commit/e283e6aea002fb533640e68f8ee7447cf0a7c90d](https://github.com/discourse/discourse/commit/e283e6aea002fb533640e68f8ee7447cf0a7c90d)

Feel free to allow whatever iframes you want via site settings.

---

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [9월 1, 2017, 7:25오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/6 "2017-09-01T19:25:40Z")

</div>

Oh thank you very much 😀 and i can add link embed from something web http or not. I trid add `http://everycircuit.com/embed/` and post

```
<iframe width="560" height="360" src="http://everycircuit.com/embed/5222925563068416" frameborder="0"></iframe>

```

not work

 ![b1](https://global.discourse-cdn.com/meta/original/3X/2/a/2aae14dcbcc5bab7cba3a87b160fcf9f2f8c018a.jpg)

I try load http it work 😓

 ![b2](https://global.discourse-cdn.com/meta/original/3X/6/c/6c6aaafe9470eb5cb1fa4719d54cdd7b35c0f30c.png)

 ![b3](https://global.discourse-cdn.com/meta/original/3X/d/d/dd4a8cda486f33441f0c6875303e5e7b9247854c.jpg)

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [9월 1, 2017, 8:21오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/7 "2017-09-01T20:21:32Z")

</div>

This isn’t a Discourse problem, it’s a browser security feature. You cannot embed an insecure (http) website in a secure (https) website. If you check your browser developer console you’ll see the error message

> Mixed Content: The page at `https://your.forum/65/3` was loaded over HTTPS, but requested an insecure resource `http://everycircuit.com/embed/5222925563068416`. This request has been blocked; the content must be served over HTTPS.

The only way to get it solved would be to contact [everycircuit.com](http://everycircuit.com) and get them to set up HTTPS connections to their site.

---

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [9월 2, 2017, 4:21오전 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/8 "2017-09-02T04:21:33Z")

</div>

Yes. I send mail to Everycircuit themes them said “They are working on a version which will work in all browsers. When do that, They will support https.” and I’ll wait.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [9월 14, 2019, 1:16오전 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/9 "2019-09-14T01:16:50Z")

</div>



---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 14, 2019, 2:34오전 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/10 "2019-09-14T02:34:08Z")

</div>

I suspect this works as they have very likely added https support by now at Everycircuit, can you confirm @Bank_Live?

---

<div class="post-metadata">

### Author: ![Bank\_Live](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bank_live/32/75893_2.png) [@Bank\_Live](https://meta.discourse.org/u/Bank_Live)
#### Post date: [9월 16, 2019, 9:11오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/11 "2019-09-16T21:11:23Z")

</div>

Yes! It work now 😁 🎉

 ![image](https://global.discourse-cdn.com/meta/original/3X/0/f/0f90e704d42ae200024b522b18480184057786bb.png)

thank you very mush for tell me.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 16, 2019, 9:30오후 UTC](https://meta.discourse.org/t/add-whitelistiframe-embed-of-everycircuit-com/66954/12 "2019-09-16T21:30:23Z")

</div>


