Skip to content
Grav 2.0 is officially stable. Read the announcement →
Support

Youtube embed codes seen as 'dangerous_tags'

Started by Dave 7 years ago · 2 replies · 1275 views
7 years ago

Good morning, I am new here but thought I should ask about this. I created a new page and embedded a Youtube video using this code:

<iframe src="//www.youtube.com/embed/hD-MBjzTT0A" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>

After saving this page I saw this notice in a green bar at the top of the page:
NOTICE: Grav found potential XSS issues in content: 'dangerous_tags'

I then removed the embed code and saved again and the warning had gone.

So for some reason Grav isn't liking the embedded code.

I am using Grav v1.6.0-rc.4 - Admin v1.9.0-rc.4 with quark v2.0.0-rc.2

I hope I have given the right information.
Cheers
Dave

7 years ago

Indeed, and it should be, even though you can disable that behavior in settings. It's generally better that you use the YouTube-shortcode plugin.

Suggested topics

Topic Participants Replies Views Activity
Support · by Paul Hodges, 4 weeks ago
19 487 6 days ago
Support · by Lauw, 1 week ago
2 104 7 days ago
Support · by Anna, 3 weeks ago
4 426 1 week ago
Support · by gtx, 4 weeks ago
4 377 3 weeks ago
Support · by Anna, 1 month ago
9 484 4 weeks ago