[nodebb-plugin-ns-embed] NS Embed

<baris>

Could be related to https://github.com/NodeBB/NodeBB/issues/7872

julian

Hm... <script> could be useful in widgets. @FrankM is that code in a widget? It should not be allowed in post text since it contains an external script.

FrankM

Found this rule in this forum. Before v1.13.0 this code works. I think problem is the XSS protection.

But i am no coder, so i will wait for an solution.

Maciej Bąk 0

Hmm I am using 1.13.0 also, and tried today many different plugins about embeding and no one works.. so can be this XSS protection

julian

@Nicolas What HTML elements does this plugin use? You probably need to hook into the sanitizer to allow those tags and/or attributes.

Nicolas

Hello @julian
The plugin provides dynamic replacements. You can specify any replacement rule (Regular Expression), something like these: https://github.com/NicolasSiver/nodebb-plugin-ns-embed/blob/master/docs/community-rules.md

Forum owners decide what they want to insert as a result of replacement.

y h

This post is deleted!

Nicolas

Version 4.0.0

The new version is available.

Added support for post preview of the embedded content
Changed dependencies to comply with the most security updates
Changed compatibility with NodeBB v1.13.x

FrankM

@Nicolas Thanks!

Unfortunately I can't get the Twitter Embed working

Per0x

This post is deleted!

Nicolas

@FrankM Twitter embed is using script injection. The latest update to the plugin adheres to the security changes in NodeBB. I think should be a separate plugin for Twitter embeds with the efficient lazy loading for necessary scripts, etc. This plugin works the best with the embeds which are based on iframe.

FrankM

@Nicolas Thanks for info.

This plugin works fine for twitter https://community.nodebb.org/topic/1443/twitter-embed-plugin/12

crazycells

@Nicolas said in [nodebb-plugin-ns-embed] NS Embed:

Version 4.0.0

The new version is available.

Added support for post preview of the embedded content

Changed dependencies to comply with the most security updates

Changed compatibility with NodeBB v1.13.x

Thanks for the update!

zaasmi

@Nicolas said in [nodebb-plugin-ns-embed] NS Embed:

@FrankM Twitter embed is using script injection. The latest update to the plugin adheres to the security changes in NodeBB. I think should be a separate plugin for Twitter embeds with the efficient lazy loading for necessary scripts, etc. This plugin works the best with the embeds which are based on iframe.

We are using it as custom http:// redirect it to https:// ?
Please guide!
demo

zaasmi

@Nicolas it was a cloudflare Automatic HTTPS Rewrites error now this status!

omega

Updated a nodeBB to 1.13, all seems relatively fine, though, I was not paying attention and I updated to v1.13.4-3. - that's ok for now, seems to work.

However the ns-embd plugin is not embedding tweets, just leaving a blank blockquote. Youtube videos embed perfectly fine, so I suspect the watch + replace needs tweaking?

Watch

(?:<a.*?)?(?:https?:\/\/)?(?:twitter\.com)\/([^\/\"\s]*)\/status\/([^\/\"\s]*)(\/photo\/\d|)(?:.*?\/a>)?

Replace

<blockquote class="twitter-tweet"><a href="https://twitter.com/$1/status/$2?ref_src=twsrc^tfw"></a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

crazycells

@omega we had the same problem with facebook and twitter links in 1.13.3

I opened this issue several weeks ago, but they did not check yet...

twitter/facebook embed does not work · Issue #24 · NicolasSiver/nodebb-plugin-ns-embed

somehow links disappeared but the plugin does not convert them to preview... Is this plugin compatible with 1.13.2?

GitHub (github.com)

omega

@crazycells Ok cool tx!

Per0x

For MP4 local Upload with plugin Composer Quill :

watch :

<a href\="/assets/uploads/files/((?:(?!\.mp4" target\="_blank">)(?:.|\n))*)\.mp4" target\="_blank">((?:(?!\.mp4</a>)(?:.|\n))*)\.mp4</a>

replace :

<video id="$1" src="/uploads/files/$1.mp4" controls style="width:800px"></video>

Jared Peckover

How would someone do a dropbox link??

Been trying to mess with it this is an example for the format

https://www.dropbox.com/s/7psik9l7x0ec099/Dylan%20Ivey.mp4

https://www.dropbox.com/s/7psik9l7x0ec099/Dylan Ivey.mp4