I’ve been trying without success to embed a Google Form. The embed code provided by Google Forms is an iframe. Is this compatible with Discourse?
It is - you’ll have to allow the
https://docs.google.com as the source domain prefix in allowed iframes.
Search for iframe in your Discourse settings.
Works great. Thanks.
Good to know. What are the risks connected to whitelisting
https://docs.google.com for iframes? It’s a pretty huge and diverse domain…
I don’t know. Perhaps someone from the Discourse team can answer how iframes are walled off from the application.
Whitelisting could be narrowed down to the specific form, though. For example, this will work as an allowed iframe source:
The full source from Google for the example above would be:
<iframe src="https://docs.google.com/forms/d/e/1FAIpQLSfshJKrg_toMlnQtiUeBILwdiCTQhs54z7xHgzbRVuiQyJ6I/viewform?embedded=true" width="760" height="500" frameborder="0" marginheight="0" marginwidth="0">Loading...</iframe>