Skip to content
● Grav 2.2 is out: 2x faster cold starts and 96% less memory on big sites. Read the announcement →

Youtube embed codes seen as 'dangerous_tags'

Started by Dave 8 years ago · 2 replies · 1353 views
8 years ago

Good morning, I am new here but thought I should ask about this. I created a new page and embedded a Youtube video using this code:

<iframe src="//www.youtube.com/embed/hD-MBjzTT0A" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>

After saving this page I saw this notice in a green bar at the top of the page:
NOTICE: Grav found potential XSS issues in content: 'dangerous_tags'

I then removed the embed code and saved again and the warning had gone.

So for some reason Grav isn't liking the embedded code.

I am using Grav v1.6.0-rc.4 - Admin v1.9.0-rc.4 with quark v2.0.0-rc.2

I hope I have given the right information.
Cheers
Dave

8 years ago

Indeed, and it should be, even though you can disable that behavior in settings. It's generally better that you use the YouTube-shortcode plugin.

Suggested topics

Topic Participants Replies Views Activity
Support · by webmasterodp, 1 week ago
4 157 6 days ago
Support · by nwhitfield, 1 week ago
2 135 1 week ago
Support · by stell, 3 weeks ago
5 369 2 weeks ago
Support · by gravinator, 1 month ago
5 559 2 weeks ago
Support · by Gravver, 3 weeks ago
6 347 3 weeks ago