Hi guys. Is it possible to control, to allow / deny, a given (specific) user ability to use iframe (for embedded videos, most obviously). adding this, passed a while as I re-read myself. The least would be - if technically a burden of such size that almost impossible, then do it as staff VS everyb…

I created a theme component that finds strava and garmin one-boxes and replaces them with iframes. If you have a fixed number of video sites you want to support, a similar solution might work: https://github.com/literatecomputing/runners-onebox-theme

@pfaffman Are you sure that your reply has anything to do with my question? I’m simply asking if with “regular” means of management, in Discourse, it is possible to dis/allow use (or digestion or rendering or whatever tech term is most appropriate) of iframe (or onebox or whatever the term/techniqu…

[صورة] lejeczek: Is it possible to control, to allow / deny, a user ability to use iframe By default, Discourse does not allow users to insert most iframe elements into posts. This is controlled by the allowed iframes site setting. That setting accepts a list of src domains of iframes that ar…

[صورة] lejeczek: I my mind, thing as critical as embedded video content — which even hosts/providers of cannot 100% control themselves, the content of it — should(must) be finely controlled (as all different computer systems I know treat any such/similar critical feature) on per user/group basis…

If that param/value could be complemented & overridden by a ‘for/per user value’ - again, perhaps in future devel/releases - then many will appreciate greatly I’m sure. Thanks.

[صورة] Falco: set max oneboxes per post to 0 It does not seem to work for me. I set to 0 yet users created posts with iframes do show up as expected, with a frame/player & do play okey. Would there be another param/option which overrides this? Also, how to understand * allowed iframes* in …

[صورة] lejeczek: I set to 0 yet users created posts with iframes do show up as expected The max oneboxes per post setting controls the number of oneboxes that can be added to a post. The terminology could be confusing here, but a “onebox” is the way that Discourse handles links from a variety…

@simon - okey, thanks. That seems to be the case, yes, I think I better understand now what happens there - if iframe exists for an URI then max oneboxes per post = 0 means nothing to iframes Yes, nomenclature &| description there could be improved, to help newcomers. To reiterate - it’s not poss…

[صورة] lejeczek: To reiterate - it’s not possible to allow onebox &| iframe only to admins/moderators, correct? I think Simon answered this already. [صورة] simon: there isn’t a staff allowed iframes setting.

@Lilly can you/devel make it feature request for future releases - thanks. I’m sure Discourse enhanced, enforced this way many! will appreciate.

التحكم في المستخدمين: إمكانية استخدام / الوصول إلى <iframe> - كيف؟

الدعم

Falco (Falco) 1 سبتمبر 2023، 4:23م 5

لتكملة الإجابة من @simon ومعالجة هذه النقطة المحددة، يمكنك تعيين max oneboxes per post إلى 0 لتعطيل oneboxing ككل، مما سيعطل أيضًا محتوى مثل مقاطع الفيديو من Youtube و Vimeo.

الموضوع		الردود	مرات العرض
Embedding Video Into Posts Using iframe Support	4	249	22 أبريل 2025
Embedding HTML inside posts by Admin Support	4	3366	12 مايو 2019
Whitelist, allowed iframe Feature	11	7024	27 سبتمبر 2018
Iframe question Support	1	928	16 مارس 2018
Iframes Not Working Support	6	1620	3 مارس 2022

التحكم في المستخدمين: إمكانية استخدام / الوصول إلى <iframe> - كيف؟

الموضوعات ذات الصلة