# Allowing iframes with protocol independent URLs

**URL:** https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388
**Category:** Support
**Created:** [April 29, 2018, 3:28am UTC](https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388 "2018-04-29T03:28:09Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ossia](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ossia/32/215651_2.png) [@ossia](https://meta.discourse.org/u/ossia)
#### Post date: [April 29, 2018, 3:28am UTC](https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388/1 "2018-04-29T03:28:09Z")

</div>

I’m trying to get [libsyn.com](http://libsyn.com)’s podcast player to render in an embedded iFrame on our Discourse instance.

YouTube’s iFrames now render fine in an embedded iFrame. Here’s how I configured it:

 ![Admin_-The_freeCodeCamp_Forum%F0%9F%94%8A](https://global.discourse-cdn.com/meta/original/3X/d/c/dcef48e84753427a9d644ad4bdbf3105c5c50538.png)

And yet here is the result:

 ![Testing_embeds_for_News_section_-Staff-The_freeCodeCamp_Forum%F0%9F%94%8A](https://global.discourse-cdn.com/meta/original/3X/2/5/25f7a2b1dc07011de0548032e105c1a7f8f0a053.jpg)

Any idea what I’m doing wrong with the allowed iframe list URL syntax? I tried regular expressions and couldn’t get those to work either.

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [April 29, 2018, 4:00am UTC](https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388/2 "2018-04-29T04:00:09Z")

</div>

You’re using the scheme-independent pseudo-URL in the iframe src, but that isn’t one of the valid source domain prefixes you’ve listed.

---

<div class="post-metadata">

### Author: ![ossia](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ossia/32/215651_2.png) [@ossia](https://meta.discourse.org/u/ossia)
#### Post date: [April 29, 2018, 6:11pm UTC](https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388/3 "2018-04-29T18:11:41Z")

</div>

Wow - I had no idea the scheme-independent pseudo-URL was a valid input for the whitelist, but it worked. Thanks, @mpalmer!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [April 29, 2018, 7:55pm UTC](https://meta.discourse.org/t/allowing-iframes-with-protocol-independent-urls/86388/4 "2018-04-29T19:55:50Z")

</div>