So an interesting change is coming to Mastodon embeds.
-
DJM (freelance for hire)replied to Stefan Bohacek last edited by
@stefan Nope. If I find a post, I'll test.
-
Stefan Bohacekreplied to DJM (freelance for hire) last edited by
@cybeardjm Thank you! No rush. It should work and look exactly the same way as with iframes.
-
DJM (freelance for hire)replied to Stefan Bohacek last edited by
@stefan Anyway, will have to wait for it to work.
My instance is still 4.2.10, so it doesn't seem to work well... -
Stefan Bohacekreplied to DJM (freelance for hire) last edited by
@cybeardjm Oh that's interesting, I am able to replicate this as well.
I added a note to https://github.com/mastodon/mastodon/pull/31766#issuecomment-2351041692.
cc @andypiper
-
@stefan @cybeardjm it should still work with the old-style iframe code but with the post URL substituted in (on the Wordpress side)
-
Stefan Bohacekreplied to Andy Piper last edited by [email protected]
@andypiper @cybeardjm Right, but this is an issue with the UI, the embed code is missing, see the screenshot I added to the GitHub issue.
-
@stefan @cybeardjm thanks for submitting!
-
@andypiper @cybeardjm No problem!
-
@stefan it seems presumptive to my old webdev mind to assume all places that allow embeds will allow external js.
Also, seriously, do you expect me to backdoor my own site??
-
@stefan now that I think about it, with instances coming and going, this is a security issue. I can go buy a domain of a defunct instance and XSS all sites that ever embedded a post.
-
@qwazix Ah, yeah, that's a really good point!