Forum > Modifications Talk

Open Embed 0.4

(1/1)

nend:
Hi,

Still waiting @ SM for my mod to get approved, however I have been working on 0.4. Fixing some bugs in the oEmbed standard that Facebook and many others used.

In 0.4 I added a standard that has been established by Twitter and also fixing the oEmbed implementation I hope.

I figured out the issues that where going on that where causing some problems with 0.3. However while doing this I introduced a security vulnerability I need help getting rid of in the unreleased 0.4.

Only way I could figure out is hosting it on a different server, however that isn't viable for most forum operators.

In 0.3 JavaScript was used to add the code to the iframe so it wouldn't affect the page, however I had problems escaping the data for the JavaScript which was the main bug in the 0.3 version.

0.3 Supports Open Graph and Meta information standards as well as a buggy oEmbed implementation.

SMFHacks:
Thanks for the post here. Awesome mod. Also feel free to post it on the downloads section at http://www.smfhacks.com/hacks.html which will put it out to all the users too.

nend:
I will go ahead and do that with 0.4.

I am thinking the JavaScript may be vulnerable in 0.3 also with oEmbed. That standard is so flawed but Facebook and so many others use it.

I am thinking it would be easier either doing a allowed list than try to do some half baked protection.

nend:
I submitted the mod however when I edited it in the downloads it became unapproved.

Navigation

[0] Message Index