[wp-trac] [WordPress Trac] #36301: oEmbed whitelist for Knight Lab tools
WordPress Trac
noreply at wordpress.org
Thu Mar 24 17:01:02 UTC 2016
#36301: oEmbed whitelist for Knight Lab tools
-------------------------+------------------------------
Reporter: JoeGermuska | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Embeds | Version: trunk
Severity: normal | Resolution:
Keywords: has-patch | Focuses:
-------------------------+------------------------------
Comment (by JoeGermuska):
@swissspidy thanks for that link. I spent a lot of time searching and I
had a lot of trouble finding anything like that, but we'll take a look at
it.
Auto-discovery is challenging for two of the three tools because, by
circumstances of history, the same HTML page uses URL parameters to serves
all renderings. We can only support discovery if the agents evaluate
javascript on the page. We're evaluating re-engineering that, but aren't
ready to commit the energy to that change just yet.
Also, for the one of the three where we render custom HTML for each
project and can support auto-discovery, we've actually stumbled into a
CORS problems with the security treatment -- the origin is sent as `null`.
That's not your problem, of course, but if anyone reading this has
pointers, I'm open to them.
More after I do my homework.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/36301#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list