# \[regression\] iframe embedding broken with allowed src domain

**URL:** https://meta.discourse.org/t/regression-iframe-embedding-broken-with-allowed-src-domain/327852
**Category:** Support
**Created:** [September 24, 2024, 4:05am UTC](https://meta.discourse.org/t/regression-iframe-embedding-broken-with-allowed-src-domain/327852 "2024-09-24T04:05:49Z")
**Posts on this page:** 1
**Showing post:** 15

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [September 24, 2024, 2:41pm UTC](https://meta.discourse.org/t/regression-iframe-embedding-broken-with-allowed-src-domain/327852/15 "2024-09-24T14:41:43Z")

</div>

The links that were added more than 2 months ago (before the [security fix](https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210) was merged) are the problem, back then you did not receive an error message and even the default links didn’t contain a third ‘/’.  
This is at least the second support topic because of that

> [@Iframe html being stripped from topic content](https://meta.discourse.org/t/iframe-html-being-stripped-from-topic-content/318348/2):
>
> Could you try adding a trailing slash to the value in allowed iframes and see if that helps? https://docs.google.com/

---

_[View the full topic](https://meta.discourse.org/t/regression-iframe-embedding-broken-with-allowed-src-domain/327852)._