I’d like to embed a jsfiddle in a conversation. How can we do that? The iframe embed code looks like: <iframe width="100%" height="300" src="//jsfiddle.net/trusktr/32cnvse3/embedded/" allowfullscreen="allowfullscreen" frameborder="0"></iframe>

Codepen is whitelisted by default: http://codepen.io/jarrodthibodeau/pen/EgPVpV Maybe we can test jsfiddle, let me check.

[画像] Falco: Maybe we can test jsfiddle, let me check. The big thing that needs testing is that there is 0 JS execution prior to a user clicking “run”. We can not risk people setting up JavaScript bombs.

[画像] sam: We can not risk people setting up JavaScript bombs. Yes, at SitePoint we onebox codepens, but fiddles are only linked to. It works well, and so far, AFAIK hasn’t introduced risk. [画像] CSS Hover Transition HTML & CSS …

[画像] sam: JavaScript bombs What are those? Something that makes the CPU work 100%?

[画像] trusktr: What are those? Something that makes the CPU work 100%? Well unrestricted JS can lead to an enormous class of issues, leaking confidential info via JSONP, high CPU when you hit a topic, trick users into thinking the page has information on it that is fake, phishing, the sky is t…

For a simple harmless example that is more representative of a common JavaScript newbie mistake than a malicious script, try running this and see how well you like it for (var i = 0; i < 1000; i++) { alert(i); } My bet is you close your browser or stop scripts well before it completes.

What exactly is different about codepen compared to jsfiddle that makes only codepen embeddable? Can’t both run javascript, and don’t both run in a iframe?

[画像] trusktr: What exactly is different about codepen compared to jsfiddle that makes only codepen embeddable? Can’t both run javascript, and don’t both run in a iframe? [画像] Embed playbuzz quiz into post support Codepen is a good netizen and only executes random JS…

Testing codepen bomb attempt: See the Pen JS Bomb Example by Joseph Orbegoso Pea ( @trusktr ) on CodePen .

Well, apparently codepen iframe embed doesn’t work. How about HTML: See the Pen JS Bomb Example by Joseph Orbegoso Pea ( @trusktr ) on CodePen .

Can we make custom oneboxes?

サポート

Falco (Falco) 2017 年 5 月 25 日午後 6:24 10

トピック		返信	表示
Jsfiddle-like embeds? Feature	8	3011	2017 年 3 月 20 日
Embedding pens from CodePen Feature	67	16126	2025 年 12 月 4 日
CodePen embed no longer working Support embedding , onebox	4	156	2025 年 12 月 3 日
CodePen is no longer oneboxing? Support	4	816	2019 年 7 月 28 日
Embed playbuzz quiz into post Support	9	3436	2022 年 10 月 25 日

Can we make custom oneboxes?

関連トピック