The idea behind this is great but sadly for me it censors parts of words like these below.
Screenshot_2021-05-10 Match Preview County v Dagenham amp; Redbridge(1).png
Screenshot_2021-05-10 County Podcasts.png
is there a fix for this?
Several plugins are incompatible with 1.13.0
Could be related to https://github.com/NodeBB/NodeBB/issues/7872
<script> could be useful in widgets. @FrankM is that code in a widget? It should not be allowed in post text since it contains an external script.
Found this rule in this forum. Before v1.13.0 this code works. I think problem is the XSS protection.
But i am no coder, so i will wait for an solution.
Hmm I am using 1.13.0 also, and tried today many different plugins about embeding and no one works.. so can be this XSS protection
@Nicolas What HTML elements does this plugin use? You probably need to hook into the sanitizer to allow those tags and/or attributes.
The plugin provides dynamic replacements. You can specify any replacement rule (Regular Expression), something like these: https://github.com/NicolasSiver/nodebb-plugin-ns-embed/blob/master/docs/community-rules.md
Forum owners decide what they want to insert as a result of replacement.
The new version is available.
Unfortunately I can't get the Twitter Embed working
@FrankM Twitter embed is using
script injection. The latest update to the plugin adheres to the security changes in NodeBB. I think should be a separate plugin for Twitter embeds with the efficient lazy loading for necessary scripts, etc. This plugin works the best with the embeds which are based on iframe.
@Nicolas Thanks for info.
This plugin works fine for twitter https://community.nodebb.org/topic/1443/twitter-embed-plugin/12
@FrankM Twitter embed is using
scriptinjection. The latest update to the plugin adheres to the security changes in NodeBB. I think should be a separate plugin for Twitter embeds with the efficient lazy loading for necessary scripts, etc. This plugin works the best with the embeds which are based on iframe.
We are using it as custom http:// redirect it to https:// ?
@Nicolas it was a cloudflare Automatic HTTPS Rewrites error now this status!
Updated a nodeBB to 1.13, all seems relatively fine, though, I was not paying attention and I updated to v1.13.4-3. - that's ok for now, seems to work.
However the ns-embd plugin is not embedding tweets, just leaving a blank blockquote. Youtube videos embed perfectly fine, so I suspect the watch + replace needs tweaking?
<blockquote class="twitter-tweet"><a href="https://twitter.com/$1/status/$2?ref_src=twsrc^tfw"></a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
@omega we had the same problem with facebook and twitter links in 1.13.3
I opened this issue several weeks ago, but they did not check yet...
@crazycells Ok cool tx!
For MP4 local Upload with plugin Composer Quill :
<a href\="/assets/uploads/files/((?:(?!\.mp4" target\="_blank">)(?:.|\n))*)\.mp4" target\="_blank">((?:(?!\.mp4</a>)(?:.|\n))*)\.mp4</a>
<video id="$1" src="/uploads/files/$1.mp4" controls style="width:800px"></video>