HTML tags not working on iframe

Started by njtweb, June 14, 2019, 08:48:05 AM

Previous topic - Next topic

njtweb

Yes, I know it's a security risk and not a good idea to use them, but I'm the only one who can as I'm the only admin.

They stopped working on iframe embed code. They used to work but don't anymore, any reason why this would happen?

This works fine in an old post on my site but when I try and post in a new post I get a 404 error message.

Working link - https://www.youthhockeyinfo.com/index.php?topic=818
Not working link - https://www.youthhockeyinfo.com/index.php?topic=1210

<iframe scrolling="no" frameborder="0" allowfullscreen webkitallowfullscreen mozallowfullscreen allow="autoplay; fullscreen" src="https://w3.cdn.anvato.net/player/prod/v3/anvload.html?key=eyJtIjoiTElOIiwidiI6IjE5MzI1OTMiLCJhbnZhY2siOiJnckQ3elFON3F4MUoyVVhHOGVVa21TbzNsUDFBUkJhbyIsInNoYXJlTGluayI6Imh0dHBzOi8vd3d3LnJvY2hlc3RlcmZpcnN0LmNvbS9uZXdzL3ZpZGVvL3RoaXJkLXBhcnR5LXRvdXJuYW1lbnQtd2Vic2l0ZXMtbWFrZS1iaWctbW9uZXktb2ZmLXlvdXRoLWhvY2tleV8yMDE4MDMyNzIzMDc1OC8xMDg0Mjg5MjMxIiwicGx1Z2lucyI6eyJkZnAiOnsiY2xpZW50U2lkZSI6eyJhZFRhZ1VybCI6Imh0dHBzOi8vcHViYWRzLmcuZG91YmxlY2xpY2submV0L2dhbXBhZC9hZHM%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"  width ="640" height="360"></iframe>

Kindred

you realize that the security issue is only partially the ability to add iframes... the use of an iframe itself is potentially insecure.
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

vbgamer45

#2
There is a [ url= tag breaking the iframe code

<iframe scrolling="no" allowfullscreen="" webkitallowfullscreen="" mozallowfullscreen="" allow="autoplay; fullscreen" src="[url=https://w3.cdn.anvato.net/player/prod/v3/anvload.html?key=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%3D%3D&quot;]Anvato Universal Player[/url];  width =" 640"="" height="480" frameborder="0"></iframe><script type="text/javascript">jQuery(document).ready(function($){jQuery(function(){jQuery("#msg_2737").css("overflow-y", "hidden");});});</script><div class="sharethis_2737" id="sharethis"><ul><li class="sha
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Shambles

If you right-click the non-working frame and select This Frame > Show Only This Frame (firefox), what appears in your address bar?

njtweb

I took the URL out and it still doesn't work in the new post but it works in the old post with the URL.

njtweb

Quote from: Shambles on June 14, 2019, 09:17:18 AM
If you right-click the non-working frame and select This Frame > Show Only This Frame (firefox), what appears in your address bar?

My apologies but I don't understand your question. The video works in the old post. In the new post the video doesn't work.

vbgamer45

url link coding is doing it. seems like a bug
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

njtweb

Quote from: vbgamer45 on June 14, 2019, 10:44:23 AM
url link coding is doing it. seems like a bug

Any way to fix that?

EDIT: I have the descriptive links mod. Would that cause it?

njtweb

It's not descriptive links causing it to happen. I turned it off and I still get the 404.

Shambles

Quote from: njtweb on June 14, 2019, 10:23:47 AM
Quote from: Shambles on June 14, 2019, 09:17:18 AM
If you right-click the non-working frame and select This Frame > Show Only This Frame (firefox), what appears in your address bar?

My apologies but I don't understand your question.



njtweb

The problem is what vbgamer45 said. Once I save the post the URL in the iframe gets converted to bbcode url tags.

Illori

admin -> posts and topics -> disable Automatically link posted URLs  and try it again.

njtweb

Quote from: Illori on June 14, 2019, 12:04:32 PM
admin -> posts and topics -> disable Automatically link posted URLs  and try it again.

Unchecked and saved. Tested again and it's still adding the url tags.

vbgamer45

Have that description links disabled then try a new post.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

njtweb

Quote from: vbgamer45 on June 14, 2019, 01:58:04 PM
Have that description links disabled then try a new post.

Tried that, no change.

Advertisement: