No edit summary |
No edit summary  |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
<noinclude>__NOTOC__ | |||
This widget allows you to embed any web page on your wiki page using an <code>iframe</code> tag. | |||
It was created by [https://www.mediawikiwidgets.org/User:Sergey_Chernyshev Sergey Chernyshev]. | |||
</noinclude><includeonly><iframe src="<!--{$url|validate:url|escape:html|regex_replace:"#^(?!(https?:)?//).*#i":''}-->" style=" | Â | ||
== Using this widget == | |||
For information on how to use this widget, see [https://www.mediawikiwidgets.org/Iframe widget description page on MediaWikiWidgets.org]. | |||
 | |||
<big>'''<font color="red">This widget should not be used on a publicly-editable wiki.</font>'''</big> | |||
 | |||
While the URL is validated, the widget cannot check the contents of the included page. When enabling this widget, you allow any user to edit to include any page, including malicious pages (containing trojans, backdoors, viruses, etc.), pages that break out of the iframe, and pages that look like your site but contain a copy used for phishing. | |||
 | |||
Consider making a widget specific to the site you wish to iframe instead. You can also consider adding the [https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attributes sandbox and allow] attribute to the iframe, which reduces but does not eliminate the risk of tricking users. | |||
 | |||
== Copy to your site == | |||
To use this widget on your site, install [https://www.mediawiki.org/wiki/Extension:Widgets MediaWiki Widgets extension] and copy the [{{fullurl:{{FULLPAGENAME}}|action=edit}} complete source code] of this page to your wiki as page '''{{FULLPAGENAME}}'''. | |||
</noinclude><includeonly><iframe src="<!--{$url|validate:url|escape:html|regex_replace:"#^(?!(https?:)?//).*#i":''}-->" style="border: <!--{$border|escape:html|default:1}-->" width="<!--{$width|escape:html|default:400}-->" height="<!--{$height|escape:html|default:300}-->"></iframe></includeonly> | |||
Latest revision as of 10:50, 26 September 2024
This widget allows you to embed any web page on your wiki page using an iframe tag.
It was created by Sergey Chernyshev.
Using this widget
For information on how to use this widget, see widget description page on MediaWikiWidgets.org.
This widget should not be used on a publicly-editable wiki.
While the URL is validated, the widget cannot check the contents of the included page. When enabling this widget, you allow any user to edit to include any page, including malicious pages (containing trojans, backdoors, viruses, etc.), pages that break out of the iframe, and pages that look like your site but contain a copy used for phishing.
Consider making a widget specific to the site you wish to iframe instead. You can also consider adding the sandbox and allow attribute to the iframe, which reduces but does not eliminate the risk of tricking users.
Copy to your site
To use this widget on your site, install MediaWiki Widgets extension and copy the complete source code of this page to your wiki as page Widget:Discord2.