Enable oEmbed Discovery

Description:

WordPress 2.9′s embeds feature is pretty handy if I may say so myself (I wrote it). However for security purposes, discovery is disabled. This plugin enables it for users with the unfiltered_html capability (Administrators and Editors by default).

What is oEmbed discovery?

Website owners can add a bit of HTML to their head that says where their oEmbed provider is located. This allows consumers such as WordPress to embed things from their website without WordPress specifically knowing about their website before hand.

However this is disabled in WordPress by default to prevent someone (either on purpose or by accident) from embedding content from a malicious website.

So oEmbed discovery is bad?

No, it’s just powerful and has risks. Whatever HTML the remote website provides is used directly. Normally that’s fine, but they could also provide HTML that is bad for you and your visitors. So it’s best if you know what you’re doing which is why it’s disabled in WordPress by default.

Download:

  • #1 written by Scott 
    about 8 months ago

    Any chance the plugin will be available for wordpress.com blogs?

  • #2 written by Viper007Bond 
    about 8 months ago

    In Reply To Scott:

    No. Only certain HTML is allowed on WordPress.com for security reasons (no one there has the unfiltered_html capability). This would allow users to bypass the restriction if it was enabled there.

  • #3 written by Ash 
    about 8 months ago

    The plugin doesn’t seem to be working unless I have missed something?

    Wordpress version 2.9, plugin installed, only one user (admin created on installation of wordpress)

    Youtube urls are not converted, ebmed shortcode has no efffect.

  • #4 written by Ash 
    about 8 months ago

    Deactivating plugin results in blank admin screen and does NOT deactivate plugin. Only way to deactivate is to manually delete form plugin folder

  • #5 written by Ash 
    about 8 months ago

    Ok, plugin works, but cannot be uninstalled without crashing admin screen and even if uninstalled does not deactivate.

    I have manually deleted the plugin from the plugin folder and yet the embed feature still works even though plugin is not present. Which sort of renders the security reasons for not auto enabling this feature in wordpress moot.

  • #6 written by Ash 
    about 8 months ago

    OK I am realising where my error lies. It stems from this page: http://codex.wordpress.org/Version_2.9

    which says the following about the embed feature: “Easier Embeds with oEmbed support (see Ticket #10337) (crippled by default, use plugin to enable it) ”

    Which would seem to indicate that the whole embed feature is crippled when in fact its just the discovery feature (they really could have explained that better) and this plugin is only needed for discovery. (which, in fairness, is what the plugins page in the repository says about the plugin)

    anyway I had the wrong starting assumption, my apologies for any confusion I caused. I was looking for the wrong indicators the plugin worked. disregard all my previous comments.

  • #7 written by Viper007Bond 
    about 8 months ago

    In Reply To Ash:

    Yes, the “crippled” bit is rather biased and I believe it was added by someone who was unhappy that we disabled discovery by default. I’ll make it more clear.

  • #8 written by Ash 
    about 8 months ago

    Just the addition of one word : Discovery : would be enough

    Easier Embeds with oEmbed support (see Ticket #10337) ( –discovery– crippled by default, use plugin to enable it)

    The lack of that one word threw me. Of course if I had paid closer attention to what YOUR plugin page said I would have caught the error (colour me sheepish)

  • #9 written by Viper007Bond 
    about 8 months ago

    In Reply To Ash:

    I changed it to “oEmbed discovery disabled by default, use plugin to enable it”. :)

  • #10 written by Gianko 
    about 8 months ago

    Hello!…
    what about compatibility with your Viper Video QuickTag PLugins and the new Embed Feature?

    is there a way to change all the previous tags?

  • #11 written by Viper007Bond 
    about 8 months ago

    In Reply To Gianko:

    No, however my plugin is currently being recoded to make all of it’s shortcodes use the new embed API (oEmbed where it can, otherwise manually created HTML).

  • #12 written by Matt Katz 
    about 7 months ago

    Perhaps it could also support oohembed.com, which has a number of oembed hooks built in for various websites.

  • #13 written by Viper007Bond 
    about 7 months ago
  • #14 written by Dave 
    about 6 months ago

    Okay, maybe I’m missing something, but what exactly does this do for me? Can I just include a link to a page:

    http://site.com/file

    and it will embed any video from that page? Or is there an embed code I need to use?

    {oembed}http://site.com/file{/oembed}

If you wish to post code, write it like [code]blah[/code] so it will display properly.

Page generated with 16 queries in 0.26677 seconds ( 98.81% PHP, 1.19% MySQL )