[wp-trac] [WordPress Trac] #34451: Embeds not working for non-WP sites

[WordPress Trac]

#34451: Embeds not working for non-WP sites
--------------------------+--------------------------------------
 Reporter:  swissspidy    |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  4.4
Component:  Embeds        |    Version:  trunk
 Severity:  major         |   Keywords:  has-patch has-unit-tests
  Focuses:                |
--------------------------+--------------------------------------
 While testing #34429 @peterwilsoncc noticed that the new embeds feature
 doesn't work for non-WordPress sites. In fact, it seems it didn't work for
 quite some time, I just didn't test it properly.

 The problem is that the `secret` shared between the iframe and the host
 site is added via PHP by WordPress. It should be done in the JavaScript
 part to ensure it works for any website.

 Luckily, that's not hard to fix. The attached patch solves it in a
 backwards-compatible manner.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34451>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform