# Embeding FunnyOrDie link forces browser to redirect to FunnyOrDie.com

**URL:** https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500
**Category:** Bug
**Created:** [2017年三月6日 21:52 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500 "2017-03-06T21:52:56Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![PaulFORegan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/paulforegan/32/68721_2.png) [@PaulFORegan](https://meta.discourse.org/u/PaulFORegan)
#### Post date: [2017年三月6日 21:52 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/1 "2017-03-06T21:52:56Z")

</div>

I was posting a link to a video on [funnyordie.com](http://funnyordie.com), and put it on a new line to try to embed the video.

Instead, it caused the browser to redirect to the link as soon as the post loaded. As the redirect happened immediately, it was very difficult to select the post to edit/delete in order to remove the link.

I’m not sure what can be done about this, except disabling embeds from the site.

Here’s the link I was using: [http://www.funnyordie.com/videos/f4cacc863f/daddy-s-boy](http://www.funnyordie.com/videos/f4cacc863f/daddy-s-boy)

[http://www.funnyordie.com/videos/f4cacc863f/daddy-s-boy](http://www.funnyordie.com/videos/f4cacc863f/daddy-s-boy)

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [2017年三月6日 22:34 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/2 "2017-03-06T22:34:55Z")

</div>

I’ve replicated this [on try](https://try.discourse.org/t/fod-redirect-take-2/643). Since try is running HTTPS, and FunnyOrDie is pulling the troublesome Javascript over HTTP, you need to enable “unsafe script loading”, the redirect happens. Extremely uncool.

I’ll leave it up to someone else on the [@team](https://meta.discourse.org/groups/team) to provide potential solutions, because I can barely _spell_ iframe, let alone know how to defang them.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [2017年三月6日 22:47 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/3 "2017-03-06T22:47:14Z")

</div>

Looks like some error on our side, because the onebox should use the [www.funnyordie.com/embed/f4cacc863f](http://www.funnyordie.com/embed/f4cacc863f) url to embed, that would work fine, but it’s using the original one.

---

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [2017年三月6日 22:56 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/4 "2017-03-06T22:56:41Z")

</div>

Shouldn’t the onebox [iframe use the `sandbox` attribute](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox) to disallow redirects? I think omitting `allow-top-navigation` from the value of `sandbox` should work…

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [2017年三月6日 22:59 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/5 "2017-03-06T22:59:15Z")

</div>

Is the onebox using the feature the site provides?

```plaintext
<iframe src="//www.funnyordie.com/embed/bceeb70de9"
 width="640" height="400" frameborder="0" 
 allowfullscreen webkitallowfullscreen mozallowfullscreen></iframe>
<div style="text-align:left;font-size:x-small;margin-top:0;width:640px;">
<a href="http://www.funnyordie.com/videos/bceeb70de9/get-out-of-the-white-house-mashup-trailer" 
title="from booyapictures, Charles Muzard">Get Out (Of The White House)</a>
 from <a href="http://www.funnyordie.com/funnyordie">Funny Or Die</a>
</div>

```

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [2017年五月17日 18:59 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/7 "2017-05-17T18:59:27Z")

</div>

Looks like another onebox issue which has been fixed. I could not reproduce this on try.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [2017年五月17日 18:59 UTC](https://meta.discourse.org/t/embeding-funnyordie-link-forces-browser-to-redirect-to-funnyordie-com/58500/8 "2017-05-17T18:59:30Z")

</div>


