Hi there, I have added https://www.tickcounter.com to my allowed_iframes, but this script still doesn’t appear: Nothing in the error logs as far as I can see. It also failed for a different embedded iframe from a different src domain that I allowed. The exact same sort of embedded iframe from the same src domain worked the last time I tried it, maybe 6 months or a year ago. Now I’m on Discourse v3.3.1 +5 (stable branch).

Did you add [图片] rahim123: https://www.tickcounter.com or https://www.tickcounter.com/ to the allowed iframes setting?

On the latest version of the tests-passed branch, the iframe embeds without issues. Note that the style and title attributes that you have set will be stripped by Discourse. You can set width and height attributes though. For example: What do you see when you navigate to the post and then open the “elements” tab of your browser’s developer tools? [20240923_21h30m07s_grim] How about if you open the “console” tab on the developer tools? Are there any errors?

:thinking: hmmm. This seems to be working as expected for me too. admin - all site settings - allowed iframes: [Screenshot 2024-09-23 at 9.43.29 PM] previewer: [Screenshot 2024-09-23 at 9.44.44 PM] cooked post: [Screenshot 2024-09-23 at 9.47.44 PM]

Thanks a lot for the replies. [图片] simon: What do you see when you navigate to the post and then open the “elements” tab of your browser’s developer tools? … [图片] simon: How about if you open the “console” tab on the developer tools? Are there any errors? Hmm there are some errors: Failed to load resource: net::ERR_CONNECTION_REFUSED beacon.min.js:1 But that appears to be a DNS blacklist that I’m using. When I connect over a VPN there are no errors. And it seems more than a coincidence that a different user with a completely different computer and network originally reported this same issue to me.

OK Firefox shows me another console message: Partitioned cookie or storage access was provided to “https://www.tickcounter.com/widget/countdown/4471981” because it is loaded in the third-party context and dynamic state partitioning is enabled. [Learn more] I should also mention that I pasted the iframe code into a skeleton static HTML file and opened it in the browser and it properly loaded the iframe.

[图片] rahim123: beacon.min.js:1 ok this iframe used to work for you… Are you on Cloudflare by chance? if so, perhaps take a look and see if disabling the speed brain thing does anything? (if it is enabled) I know that it is relatively new thing. [图片] Enable and disable Speed Brain - Speed Brain Speed Brain is available in Cloudflare's Speed tab of the dashboard and also in the API. | Learn how Speed Brain enhances web performance by prefetching likely next pages, improving metrics like LCP and TTFB.

Hi there, no, I don’t use Cloudflare.

[图片] rahim123: I should also mention that I pasted the iframe code into a skeleton static HTML file and opened it in the browser and it properly loaded the iframe. yes I can get the iframe to work. something is blocking it on your forum. [图片] [regression] iframe embedding broken with allowed src domain Support thinking hmmm. This seems to be working as expected for me too. admin - all site settings - allowed iframes: [Screenshot 2024-09-23 at 9.43.29 PM] previewer: [Screenshot 2024-09-23 at 9.44.44 PM] cooked post: [Screenshot 2024-09-23 at 9.47.44 PM]

[图片] Lilly: something is blocking it on your forum Hmm yep that’s what it looks like. But shouldn’t Discourse have an error in /logs/ ? I’m not running anything that I can think of on the server that would block that. I was using the hosting provider’s DNS in my /etc/resolv.conf, and I tried switching it to 8.8.8.8 with no change in this issue.

[图片] rahim123: error in /logs/ ? only if it causes an error. something might be blocking it as a matter of proper functionality. my guess is to try to figure out if/what changed around the time this stopped working. I wonder if a Content Security Policy change could have affected it.

You seem to say that you’re using a dns block list and it’s breaking things, so don’t use it?

【回归】允许的 src 域名下的 iframe 嵌入已损坏

产品支持

Moin 2024 年9 月 24 日 14:41 15

2 个月前添加的链接（在安全修复合并之前）是问题所在，当时您没有收到错误消息，甚至默认链接也不包含第三个“/”。
这至少是第二个因此类问题而产生的支持主题

话题		回复	浏览量
Iframe not working in posts even with exception(s) in the back end Product Support	3	175	2025 年4 月 8 日
Supporting iframe embeds from different domains? Feature	57	24351	2018 年8 月 30 日
Iframes Not Working Product Support	6	1668	2022 年3 月 3 日
Iframe html being stripped from topic content Product Support	3	167	2024 年10 月 15 日
Support embedding Discourse in an iframe Feature embedding	16	8700	2025 年6 月 13 日

【回归】允许的 src 域名下的 iframe 嵌入已损坏

相关话题