mangle oembed stuff to prevent content warnings, only support services that work when you mangle them; please let us know if your favorite service works when you gsub out all of the https links

This commit is contained in:
Maxwell Salzberg 2011-10-26 15:11:31 -07:00
parent 3b1f3f90d1
commit 7e73865147
2 changed files with 2 additions and 6 deletions

View file

@ -20,7 +20,7 @@ module OEmbedHelper
else
end
return html.html_safe
return html.gsub('http', 'https').html_safe
end
def link_to_oembed_image(cache, prefix = 'thumbnail_')

View file

@ -9,11 +9,7 @@ OEmbed::Providers.register_fallback(OEmbed::ProviderDiscovery)
# note that 'trusted_endpoint_url' is the only information
# in OEmbed that we can trust. anything else may be spoofed!
SECURE_ENDPOINTS = [::OEmbed::Providers::Youtube.endpoint,
::OEmbed::Providers::Viddler.endpoint,
::OEmbed::Providers::Qik.endpoint,
::OEmbed::Providers::Revision3.endpoint,
::OEmbed::Providers::Hulu.endpoint,
::OEmbed::Providers::Vimeo.endpoint,
::OEmbed::Providers::Flickr.endpoint,
'http://soundcloud.com/oembed',
'http://cubbi.es/oembed'
]