Enable oEmbed Discovery

Description:

WordPress 2.9′s embeds feature is pretty handy if I may say so myself (I wrote it). However for security purposes, discovery is disabled. This plugin enables it for users with the unfiltered_html capability (Administrators and Editors by default).

What is oEmbed discovery?

Website owners can add a bit of HTML to their head that says where their oEmbed provider is located. This allows consumers such as WordPress to embed things from their website without WordPress specifically knowing about their website before hand.

However this is disabled in WordPress by default to prevent someone (either on purpose or by accident) from embedding content from a malicious website.

So oEmbed discovery is bad?

No, it’s just powerful and has risks. Whatever HTML the remote website provides is used directly. Normally that’s fine, but they could also provide HTML that is bad for you and your visitors. So it’s best if you know what you’re doing which is why it’s disabled in WordPress by default.

Download:

25 comments to Enable oEmbed Discovery

  1. Scott says:

    Any chance the plugin will be available for wordpress.com blogs?

    • Viper007Bond says:

      No. Only certain HTML is allowed on WordPress.com for security reasons (no one there has the unfiltered_html capability). This would allow users to bypass the restriction if it was enabled there.

  2. Ash says:

    The plugin doesn’t seem to be working unless I have missed something?

    WordPress version 2.9, plugin installed, only one user (admin created on installation of wordpress)

    Youtube urls are not converted, ebmed shortcode has no efffect.

  3. Ash says:

    Deactivating plugin results in blank admin screen and does NOT deactivate plugin. Only way to deactivate is to manually delete form plugin folder

  4. Ash says:

    Ok, plugin works, but cannot be uninstalled without crashing admin screen and even if uninstalled does not deactivate.

    I have manually deleted the plugin from the plugin folder and yet the embed feature still works even though plugin is not present. Which sort of renders the security reasons for not auto enabling this feature in wordpress moot.

  5. Ash says:

    OK I am realising where my error lies. It stems from this page: http://codex.wordpress.org/Version_2.9

    which says the following about the embed feature: “Easier Embeds with oEmbed support (see Ticket #10337) (crippled by default, use plugin to enable it) ”

    Which would seem to indicate that the whole embed feature is crippled when in fact its just the discovery feature (they really could have explained that better) and this plugin is only needed for discovery. (which, in fairness, is what the plugins page in the repository says about the plugin)

    anyway I had the wrong starting assumption, my apologies for any confusion I caused. I was looking for the wrong indicators the plugin worked. disregard all my previous comments.

  6. Ash says:

    Just the addition of one word : Discovery : would be enough

    Easier Embeds with oEmbed support (see Ticket #10337) ( –discovery– crippled by default, use plugin to enable it)

    The lack of that one word threw me. Of course if I had paid closer attention to what YOUR plugin page said I would have caught the error (colour me sheepish)

  7. Gianko says:

    Hello!…
    what about compatibility with your Viper Video QuickTag PLugins and the new Embed Feature?

    is there a way to change all the previous tags?

  8. [...] ?????? ????? — Enable oEmbed Discovery ?? Viper007Bond. ??????? ??????????? ?? ?????????? [...]

  9. Matt Katz says:

    Perhaps it could also support oohembed.com, which has a number of oembed hooks built in for various websites.

  10. Dave says:

    Okay, maybe I’m missing something, but what exactly does this do for me? Can I just include a link to a page:

    http://site.com/file

    and it will embed any video from that page? Or is there an embed code I need to use?

    {oembed}http://site.com/file{/oembed}

  11. [...] Enable oEmbed DiscoveryMit Enable eEmbed Discovery werden nicht nur die Links von WordPress unterstützten Seiten per oEmbed konvertiert, sondern jede Seite, die oEmbed anbietet. Kann natürlich ein Risiko bedeuten, da hier aber im Regelfall nur Oliver und ich publizieren, ist das Risiko eher gering. [...]

  12. [...] Email or follow me on Twitter or Facebook.Ceci est un test utilisant oEmbed et le plugin WordPress Enable oEmbed DiscoveryCeci est un test utilisant le code d’insertion fourni sur [...]

  13. Vic says:

    “Website owners can add a bit of HTML to their head that says where their oEmbed provider is located.”

    Yeah, that’s pretty vague. Obviously something needs to be done AFTER installing the plugin, but that’s all the installation instructions say.

    *What* bit of HTML to the head section must we add?

  14. Hi,
    I have activated your plugin but it does not work with my Multisite. Here is my multisite:

    http://www.studyguide.com.vn

    and I want this member site have ability to embed simple code:

    http://nguyenkhanhlam.com

    Thank for your plugin.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

If you wish to post code, write it like [code]blah[/code] so it will display properly.