Feature #2483
closedAdvanced iFrame plugin request
0%
Description
A member has requested the Advanced iFrame plugin
in the thread , I mentioned that this is a security risk and that we probably can't implement, but can you research and let me know what you think, Boone?
Updated by Boone Gorges about 11 years ago
- Status changed from Assigned to Reporter Feedback
- Estimated time set to 0.25 h
Correct. We can't allow users to inject arbitrary iframes on their sites.
If this is a mission-critical feature for Carlos, and if the iframe is not something that he'll need to change often (the iframe URL always stays the same), I can make him a shortcode. Can you point him toward this ticket, so he can verify that http://tegrity.hostos.cuny.edu/Workshops/Home/Server?serverId=1 is the correct URL, and that it'll be persistent over time?
Updated by Matt Gold about 11 years ago
From the submitter:
Hi Matt,
Thanks for your quick reply.
The URL is for the RSVP page we will have in the Bronx EdTech Showcase, and will not change until next year when we make the next showcase
Here is the correct link: http://tegrity.hostos.cuny.edu/Workshops/Home/WorkshopInstance?workshopInstanceId=805
This is an application that was developed by my office as an events registration system. What will change next year will be the workshopIstanceId.
The short code will work just fine.
Updated by Boone Gorges about 11 years ago
- Status changed from Reporter Feedback to Resolved
The shortcode was added to the repo in https://github.com/castiron/cac/commit/cf2a007b4d82ac68622c9b38c6be7c096b3cdcc9. Use:
[hostos-event-manager workshopid="805" height="600"]
Height is optional - it defaults to 1000. (in pixels)
Updated by Matt Gold about 11 years ago
from Carlos:
Hi Matthew,
Thank you for your help with my request.
I tried, but the short code shows there: http://bronxtech2013.commons.gc.cuny.edu/rsvp/
Is there something that needs to be enabled for the short code to work?
Updated by Boone Gorges about 11 years ago
The change will not be on the production site until the 1.4.21 release, later today.