# Internal URL no longer oneboxing

**URL:** https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208
**Category:** Support
**Created:** [June 9, 2017, 5:17am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208 "2017-06-09T05:17:04Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 5:17am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/1 "2017-06-09T05:17:04Z")

</div>

At some point in the last 2 days internal URLs stopped oneboxing on my instance. I’m up to date with tests-passed as of 1:15 AM EST 6/9/17.

There are the errors I’m seeing in the console when a post with an internal URL is loaded. There do not appear to be any related errors in `/logs`.

 ![](https://global.discourse-cdn.com/meta/original/3X/1/b/1b82d8e84e096897c7eaebeb3131bf96d6ab522c.png)

---

<div class="post-metadata">

### Author: ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 9, 2017, 6:07am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/2 "2017-06-09T06:07:59Z")

</div>

I am unable to reproduce the problem. Are you using any onebox plugin?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 6:09am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/3 "2017-06-09T06:09:09Z")

</div>

Nope. No non-official plugins.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 9, 2017, 7:45am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/4 "2017-06-09T07:45:16Z")

</div>

Can you repro this on meta or try?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 7:46am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/5 "2017-06-09T07:46:09Z")

</div>

Nope. Hence #Support and not #Contribute > Bug. Hoping there might be suggestions on why, and how to troubleshoot.

Edited OP to be clearer.

---

<div class="post-metadata">

### Author: ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 9, 2017, 7:48am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/6 "2017-06-09T07:48:24Z")

</div>

I can reproduce the same problem even for external URL below. It returns same ‘404 not found’ error.

> **[Childhood Statelessness in South Africa](https://grassrootsjusticenetwork.org/resources/childhood-statelessness-in-south-africa/)**
>
> Childhood statelessness in South Africa is a generally unaddressed, largely preventable, but a growing phenomenon. This short publication presents the experiences of 9 children who have been let down…

As it mentioned in another topic

> [@Onebox no longer works for my wordpress site](https://meta.discourse.org/t/onebox-no-longer-works-for-my-wordpress-site/64202/4):
>
> The OpenGraph data looks OK to me, any ideas @eviltrout?
> 
> [Iframely URL Debugger - Open Graph, Twitter Cards, oEmbed](http://iframely.com/debug?uri=https%3A%2F%2Fnamati.org%2Fresources%2Fchildhood-statelessness-in-south-africa%2F)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 9, 2017, 7:49am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/7 "2017-06-09T07:49:26Z")

</div>

Sorry I am not following, what does that external URL have to do with this report of internal (discourse) URL oneboxing issues?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 7:51am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/8 "2017-06-09T07:51:04Z")

</div>

While I was about to say the same thing - I think the point is I’m getting a very similar console error here on Meta with that link.

 ![](https://global.discourse-cdn.com/meta/original/3X/7/b/7bf36e6b3ee2edea686dfb4fa829d5d881413e1a.png)

Is there any chance there’s some sort of regression going on here?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 9, 2017, 7:52am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/9 "2017-06-09T07:52:01Z")

</div>

Possible, @eviltrout will need to look tomorrow

---

<div class="post-metadata">

### Author: ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 9, 2017, 7:52am UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/10 "2017-06-09T07:52:44Z")

</div>

I am trying to say it looks like the problem is randomly happening in some URLs. In both topics it returning the same error. So it might be same issue.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [June 9, 2017, 2:03pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/11 "2017-06-09T14:03:01Z")

</div>

I seem to recall that private topics don’t work for oneboxing - is that the issue you are experiencing with internal links?

That said, I can confirm I am getting identical 404 errors in the console for both internal links (linking to private topics in a private category) and [namati.org](http://namati.org) links.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 2:55pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/12 "2017-06-09T14:55:53Z")

</div>

> [@tobiaseigen](#):
>
> I seem to recall that private topics don’t work for oneboxing - is that the issue you are experiencing with internal links?

While my site is login required (and SSO), internal oneboxes definitely worked before. And the error above comes from a link to a “public” category.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 9, 2017, 3:20pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/13 "2017-06-09T15:20:24Z")

</div>

It’s normal for onebox to return the 404 error you’re seeing in the console above if it can’t retrieve the onebox, so I don’t think the error for internal oneboxes is the same as the external one.

I need better steps to reproduce this internal issue. (The external one linked before is good for me to investigate)

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 3:30pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/14 "2017-06-09T15:30:30Z")

</div>

I don’t really have any more details at the moment. I’ll see what the results of your investigation with the external link are, then see if I need to get you more detail.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 9, 2017, 3:37pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/15 "2017-06-09T15:37:16Z")

</div>

I already replied in there - it’s due to the User Agent being blacklisted somehow. I don’t think it’s related.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 3:40pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/16 "2017-06-09T15:40:23Z")

</div>

Oh darn…

Well, here’s what I’ve got: it stopped working sometime in the last few days - it definitely worked previously as there are internal link oneboxes all over the forums. Nothing should have changed network wise on our end, but I’m reaching out to IT to check. External oneboxes (at least to other Discourse sites) still works.

I’m open to ideas/questions…

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 9, 2017, 3:43pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/17 "2017-06-09T15:43:24Z")

</div>

When you say internal link, are you referring to links by IP address or internal hostnames? Because a recent security features is meant to disable [SSRF](https://cwe.mitre.org/data/definitions/918.html) attacks by ensuring redirects are to external services.

It’s possible we don’t see it here because external links resolve to a different IP than internal ones. If your network infrastructure is resolving the outer hostname to an internal IP internally that could cause it to stop working.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 3:49pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/18 "2017-06-09T15:49:31Z")

</div>

Internal hostnames. Pasting a link in the form of `https://forums.mydomain.com/t/name-here/id-here`.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 9, 2017, 3:50pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/19 "2017-06-09T15:50:17Z")

</div>

Just to be clear, `forums.mydomain.com` are visible from the outside world? Or just internally?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 9, 2017, 3:50pm UTC](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208/20 "2017-06-09T15:50:56Z")

</div>

> [@eviltrout](#):
>
> Or just internally?

Well, they redirect to another subdomain for auth, but yes, they’re visible.

> [@eviltrout](#):
>
> If your network infrastructure is resolving the outer hostname to an internal IP internally that could cause it to stop working.

IT just said “yes”, and “one sec”.

[Next page](https://meta.discourse.org/t/internal-url-no-longer-oneboxing/64208.md?page=2)
