[wp-trac] [WordPress Trac] #28507: Secure oEmbeds

Fri Jul 11 22:34:20 UTC 2014

#28507: Secure oEmbeds
----------------------------+------------------
 Reporter:  johnbillion     |       Owner:
     Type:  task (blessed)  |      Status:  new
 Priority:  normal          |   Milestone:  4.0
Component:  Embeds          |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |     Focuses:
----------------------------+------------------

Comment (by stephdau):

 Happy to report that https://wordpress.tv/ is now SSL-ready, for playback
 on the site, or embedded.

 oEmbed responses now use '''protocol-relative URLs''' for the video
 location, which work under both HTTP and HTTPS.

 JSON:
 {{{
 {"type":"video","version":"1.0","title":null,"width":400,"height":225,"html":"<embed
 src=\"\/\/v.wordpress.com\/3JiLCPst\" type=\"application\/x-shockwave-
 flash\" width=\"400\" height=\"225\" allowscriptaccess=\"always\"
 allowfullscreen=\"true\" wmode=\"transparent\"><\/embed>"}
 }}}

 XML
 {{{
 <?xml version="1.0" encoding="utf-8" standalone="yes"?>
 <oembed>
         <type>video</type>
         <version>1.0</version>
         <title></title>
         <width>400</width>
         <height>225</height>
         <html><embed src="//v.wordpress.com/3JiLCPst"
 type="application/x-shockwave-flash" width="400"
 height="225" allowscriptaccess="always"
 allowfullscreen="true"
 wmode="transparent"></embed></html>
 </oembed>
 }}}

 The protocol mismatch issue was also handled.
 *
 http://wordpress.tv/oembed/?url=http%3A%2F%2Fwordpress.tv%2F2014%2F06%2F13
 %2Fmel-choyce-creating-a-great-portfolio-website%2F&format=json
 *
 http://wordpress.tv/oembed/?url=https%3A%2F%2Fwordpress.tv%2F2014%2F06%2F13
 %2Fmel-choyce-creating-a-great-portfolio-website%2F&format=json
 *
 https://wordpress.tv/oembed/?url=http%3A%2F%2Fwordpress.tv%2F2014%2F06%2F13
 %2Fmel-choyce-creating-a-great-portfolio-website%2F&format=json
 *
 https://wordpress.tv/oembed/?url=https%3A%2F%2Fwordpress.tv%2F2014%2F06%2F13
 %2Fmel-choyce-creating-a-great-portfolio-website%2F&format=json

 The most network-inquisitives in the crowd might notice some 404s in the
 load process, upon playback, but those will soon be handled as well, and
 should not affect playback on the site, or embedded. :)

 We're also hoping to look into iframe support in the future, but no
 timeframe on that.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28507#comment:19>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform