# Replacement for whitelist-iframe

**URL:** https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383
**Category:** Support
**Created:** [30 januari 2018 om 19:39 UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383 "2018-01-30T19:39:09Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![codetricity](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codetricity/32/3773_2.png) [@codetricity](https://meta.discourse.org/u/codetricity)
#### Post date: [30 januari 2018 om 19:39 UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383/1 "2018-01-30T19:39:09Z")

</div>

With Discourse 1.9, I was using the whitelist-iframe plugin below.

[https://github.com/scossar/whitelist-iframe](https://github.com/scossar/whitelist-iframe)

with Discourse 2.0, the plug-in no longer works. I am trying to use the Discourse whitelist feature, but need help understanding how to embed an iframe into a Discourse post.

Under admin settings, I have listed the whitelist as follows:

 ![image](https://global.discourse-cdn.com/meta/original/3X/a/2/a29e30f1fb457a3270b35a8b2a2e9c6f823114a2.png)

My post contains the following:

`<iframe src="http://theta360.guide/thetapicts/michal2.html" width="800" height="425"></iframe>`

I’m expecting 360 image to be embedded in the post with navigation (I can rotate the image).

Is there something else I need to do?

Note that the Discourse site I’m using does not have https on it right now, primarily because I’m not sure how to set that up. If there’s a tutorial on how to set up https, that would be nice too. 🙂

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [30 januari 2018 om 20:48 UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383/2 "2018-01-30T20:48:42Z")

</div>

I think you’re looking for the new `allowed iframes` setting. Try adding your site to that?

> [@codetricity](#):
>
> Note that the Discourse site I’m using does not have https on it right now, primarily because I’m not sure how to set that up. If there’s a tutorial on how to set up https, that would be nice too. 🙂

See [Set up HTTPS support with Let's Encrypt](https://meta.discourse.org/t/setting-up-lets-encrypt/40709) for that. You should be able to ssh to your server and re-run `./discourse-setup` to enable SSL. If that doesn’t work, follow the steps in the linked topic.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [27 april 2020 om 04:03 UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383/4 "2020-04-27T04:03:03Z")

</div>



---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [27 april 2020 om 17:09 UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383/5 "2020-04-27T17:09:23Z")

</div>