# Blacklist vs whitelist onebox

**URL:** <https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811>\
**Category:** Feature\
**Created:** [4 Novembre 2014, 11:48am UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811 "2014-11-04T11:48:57Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)\
**Post date:** [18 Giugno 2016, 12:41am UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811/10 "2016-06-18T00:41:44Z")

</div>

Yeah I think only oEmbed needs whitelisting, and even then most of the oEmbed returns are unusable due to `<script>`s.

---

_[View the full topic](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811)._