(SOLVED) How to embed a Youtube video into an FAQ article?

[bayerex]

Hi all,

How can I embed a Youtube video into an FAQ article? When I enter such a source tag it doesn't work. Only a black frame is displayed.

<iframe width="420" height="315" src="//www.youtube-nocookie.com/embed/n5oWpJ8q6oc" frameborder="0" allowfullscreen></iframe>

Would really appreciate a solution

[bayerex]

Anyone got any advise for me on this one?

[crythias]

no, but probably because iframe is not good for embedding. I'd probably link it and employ a javascript handler to provide a popover.

[bayerex]

I changed line 204 in file Kernel/Output/HTML/Standard/AgentFAQZoom.dtl and removed: sandbox="allow-same-origin allow-popups" from iframe tag.

[jojo]

you should not do this. It is a security setting!

[bayerex]

only myself edits the FAQ. Does that still pose a security problem?

[jojo]

yes

[crythias]

It's a security issue because it allows popups from *any* source.

[nanotowers]

hi Bayerex you could try this HTML code:

<div class="ArticleFAQContent">
<div class="message">
<iframe allowfullscreen="" frameborder="0" height="486" marginheight="0" marginwidth="0" scrolling="no" src="https://www.youtube-nocookie.com/embed/n5oWpJ8q6oc" style="border:1px solid #CCC;border-width:1px 1px 0;margin-bottom:5px" width="597"></iframe></div>
</div>

[nanotowers]

Work For me

[bayerex]

It's a security issue because it allows popups from *any* source.

But the only possible "source" in this case can be Youtube, right?

[bayerex]

Hi nanotowers,

I tried your source on a test instance that hasn't been changed but it doesn't work for me. Infact, upon saving it the source gets completely removed. Any ideas why?

[nanotowers]

this is my complete code.


<ul>
<li class="Customer Visible">
<div class="MessageHeader">
<h3>
Descripci&oacute;n:</h3>
<div class="Clear">
&nbsp;</div>
</div>
<div class="ArticleFAQContent">
<div class="message">
<iframe allowfullscreen="" frameborder="0" height="486" marginheight="0" marginwidth="0" scrolling="no" src="https://www.youtube-nocookie.com/embed/n5oWpJ8q6oc" style="border:1px solid #CCC;border-width:1px 1px 0;margin-bottom:5px" width="597"></iframe></div>
</div>
</li>
</ul>
<br />

[crythias]

It's a security issue because it allows popups from *any* source.

But the only possible "source" in this case can be Youtube, right?

The problem is daisy chaining. Even if you only linked to one external site, anything that site provides via third party is allowed as well.