# Replacement for whitelist-iframe

**URL:** https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383
**Category:** Support
**Created:** [January 30, 2018, 7:39pm UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383 "2018-01-30T19:39:09Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 30, 2018, 8:48pm UTC](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383/2 "2018-01-30T20:48:42Z")

</div>

I think you’re looking for the new `allowed iframes` setting. Try adding your site to that?

> [@codetricity](#):
>
> Note that the Discourse site I’m using does not have https on it right now, primarily because I’m not sure how to set that up. If there’s a tutorial on how to set up https, that would be nice too. 🙂

See [Set up HTTPS support with Let's Encrypt](https://meta.discourse.org/t/setting-up-lets-encrypt/40709) for that. You should be able to ssh to your server and re-run `./discourse-setup` to enable SSL. If that doesn’t work, follow the steps in the linked topic.

---

_[View the full topic](https://meta.discourse.org/t/replacement-for-whitelist-iframe/79383)._