Skip to content
This repository was archived by the owner on May 17, 2020. It is now read-only.

Conversation

@nicolaasmatthijs
Copy link

When using oEmbed on an https page, security conscious browsers such as Chrome won't load some of the http jsonp and swf content.

[blocked] The page at https://mydomain.org/mypage ran insecure content from http://flickr.com/services/oembed?format=json&url=http%3A//www.flickr.com/p…et-72157633424719011&jsoncallback=jQuery20006060085988137871_1372157077449.

In this PR, I've made the following providers protocol agnostic and tested this on both http and https:

  • blip.tv
  • dailymotion
  • deviantart
  • flickr
  • ifixit.com
  • img.ly
  • instagram
  • pastebin.com
  • pinterest
  • scribd
  • slideshare
  • soundcloud
  • speakerdeck
  • ted.com
  • twitgoo
  • twitpic
  • vimeo
  • youtube

The same approach would probably work for the other providers as well, but I haven't fixes and/or tested any of those yet.

@dieseltravis
Copy link

Interesting, I was looking into writing a proxy service to solve this issue, but I think I'll give your solution a try first.

@nicolaasmatthijs
Copy link
Author

@starfishmod : Is there any chance that this can be merged? Cross-protocol embedding is becoming an increasingly big problem in the latest browser versions.

@LGCambra
Copy link

LGCambra commented Sep 8, 2014

The NFL would like to continue support for this plugin. Please re-submit your pull request with https://github.com/nfl/jquery-oembed-all. Thank you.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants