Hello, I like to know if it would be possible to whitelist all the code inside of a div tag, regardless of the code ? (in a forum post) I guess not and must whitelist each tag in a plugin? Sorry for my bad english and thank you in advance.

That could be dangerous. What exactly are you trying to achieve?

I manages a kitesurfing site and I’d like to do a weather category. With a webcam image and three windows of prevision wind like the pictures. [صورة] [صورة] Here’s the code : windfinder ` <script type="text/javascript" src="https://fr.windfinder.com/widget/forecast/js/lac_des_rousses?un…

maybe with a plugin like that : .js (function() { Discourse.Markdown.whiteListTag('script', 'src', '*'); Discourse.Markdown.whiteListTag('iframe', 'src', '*'); })(); .js.es6 import { registerOption } from 'pretty-text/pretty-text'; registerOption((siteSettings, opts) => { opts.features[".…

[صورة] Alex_Rabolin: maybe with a plugin like that If you do that I most certainly want to never visit your forum. Allowing posts to have inserted JavaScript / iframe code is an extremely bad idea. It opens up the possibility of all kinds of problems ranging from cookie theft to click-jacki…

Thanks a lot @Mittineague . I agree entirely with you, it’s just that I’m a newbe and i do not know how allow only content from those three specific domains. For the iframe of meteoblue, there possible whith this plugin i think ( https://github.com/scossar/whitelist-iframe ) but I’d rather get there …

[صورة] Alex_Rabolin: how allow only content from those three specific domains. Try a separate whitelist line for each hard-coding as deep as you can that will still work and wildcarding only what you need to (the *). eg. https://fr.windfinder.com/widget/forecast/js/* https://www.meteoblue.co…

[صورة] Mittineague: https://fr.windfinder.com/widget/forecast/js/ * Météo Seattle - meteoblue * http://widget.windguru.cz/js/wg_widget.php If i understand, like that : .js (function() { Discourse.Markdown.whiteListTag('script', 'src', 'https://fr.windfinder.com/widget/forecast/js/*'); D…

Looking at it more closely, I think the windguru code is going to be a problem. I’m not sure how to go about it, or if it’s even possible. You are allowed to show forecasts for up to 10 different spots per website (domain) But I’m sure if it is possible that the solution would be complicated. W…

هل تريد وضع كل الشيفرة داخل وسم div في القائمة البيضاء؟

الدعم

Alex_Rabolin (Alex Rabolin) 12 أكتوبر 2016، 11:53ص 10

Thank you for your advice Precious, I’m content with thé two first Domains and if i need, I will add this one:

I pass this message SOLVED.
Thank you.

الموضوع		الردود	مرات العرض
Whitelisting HTML tags Support	4	1041	2 يونيو 2022
Supporting iframe embeds from different domains? Feature	58	23409	30 أغسطس 2018
Guidance whitelisting arbitrary HTML attributes? Support	10	1594	12 يناير 2023
Post HTML Element Class Being Removed Support	11	2624	30 أغسطس 2022
Iframe issue without URL Support	10	1498	5 يونيو 2019

هل تريد وضع كل الشيفرة داخل وسم div في القائمة البيضاء؟

الموضوعات ذات الصلة