Skip to content
This repository has been archived by the owner on May 17, 2020. It is now read-only.

oEmbed https issues #87

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

nicolaasmatthijs
Copy link

When using oEmbed on an https page, security conscious browsers such as Chrome won't load some of the http jsonp and swf content.

[blocked] The page at https://mydomain.org/mypage ran insecure content from http://flickr.com/services/oembed?format=json&url=http%3A//www.flickr.com/p…et-72157633424719011&jsoncallback=jQuery20006060085988137871_1372157077449.

In this PR, I've made the following providers protocol agnostic and tested this on both http and https:

  • blip.tv
  • dailymotion
  • deviantart
  • flickr
  • ifixit.com
  • img.ly
  • instagram
  • pastebin.com
  • pinterest
  • scribd
  • slideshare
  • soundcloud
  • speakerdeck
  • ted.com
  • twitgoo
  • twitpic
  • vimeo
  • youtube

The same approach would probably work for the other providers as well, but I haven't fixes and/or tested any of those yet.

@dieseltravis
Copy link

Interesting, I was looking into writing a proxy service to solve this issue, but I think I'll give your solution a try first.

@nicolaasmatthijs
Copy link
Author

@starfishmod : Is there any chance that this can be merged? Cross-protocol embedding is becoming an increasingly big problem in the latest browser versions.

@LGCambra
Copy link

LGCambra commented Sep 8, 2014

The NFL would like to continue support for this plugin. Please re-submit your pull request with https://github.com/nfl/jquery-oembed-all. Thank you.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants