Youtube embed code removed by htmlpurifier

Bug #708327 reported by Richard Mansfield
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Mahara
Fix Released
Medium
Richard Mansfield

Bug Description

The default embed code on youtube is now an iframe, which gets stripped out by htmlpurifier. See http://htmlpurifier.org/phorum/read.php?3,5255,5261

We may need to go back to the bad old days of custom htmlpurifier filters.

We'd also need to allow iframes through from tinymce (add "iframe[src|width|height|align|title|class|type|frameborder|allowfullscreen]" or similar to extended_valid_elements)

Revision history for this message
Richard Mansfield (richard-mansfield) wrote :

I added a temporary custom filter for youtube to let the iframes through. We will remove it when htmlpurifier implements a SafeIframe option.

Changed in mahara:
status: New → Fix Committed
assignee: nobody → Richard Mansfield (richard-mansfield)
milestone: none → 1.4.0
Revision history for this message
François Marier (fmarier) wrote :

And I have just added a regexp from Mike Kelly to the external video block.

Changed in mahara:
status: Fix Committed → Fix Released
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.