[Building Sakai] Antisamy in high security breaks the old youtube embed code

[Sam Ottenhoff]

I believe Youtube has made a change recently to use the protocol-relative
URL "//" instead of http:// or https://.

So Youtube's old embed code and new embed code will not work with AntiSamy
high enabled.  Sure, please open a JIRA in the KNL section.

Thanks.


On Fri, Jul 19, 2013 at 3:57 PM, Kusnetz, Jeremy <JKusnetz at apus.edu> wrote:

>  Now that Antisamy is turned on in 2.9.x we are finding that it’s default
> high security setting is breaking youtube’s old embed code:****
>
> ** **
>
> For example from youtubes current home page video.****
>
> ** **
>
> Click on Share and then “Use old embed code”****
>
> And you get:****
>
> ** **
>
> <object width="560" height="315"><param name="movie" value="//
> www.youtube.com/v/JNSK0647wJI?version=3&amp;hl=en_US<http://www.youtube.com/v/JNSK0647wJI?version=3&hl=en_US>"></param><param
> name="allowFullScreen" value="true"></param><param name="allowscriptaccess"
> value="always"></param><embed src="//
> www.youtube.com/v/JNSK0647wJI?version=3&amp;hl=en_US<http://www.youtube.com/v/JNSK0647wJI?version=3&hl=en_US>"
> type="application/x-shockwave-flash" width="560" height="315"
> allowscriptaccess="always" allowfullscreen="true"></embed></object>****
>
> ** **
>
> If I set:****
>
> content.cleaner.default.low.security=true****
>
> ** **
>
> it seems to be fine.****
>
> ** **
>
> Shall I open a JIRA?****
>
> ** **
>
> ** **
>
> This message is private and confidential. If you have received it in
> error, please notify the sender and remove it from your system.
>
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to
> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
> "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130719/75d593bb/attachment.html