Trying to add Discord widget iframe | Miraheze | Page 1

errant kayak Feb 4, 2024, 2:37 AM

#

Hi! I'm trying to add the Discord widget to our wiki, which is an iframe code generated by Discord itself. I see iframe is not parsed/allowed, is there a way I can enable it?

The code Discord produces looks like this:

<iframe src="https://discord.com/widget?id=[IDHERE]&theme=dark" width="350" height="500" allowtransparency="true" frameborder="0" sandbox="allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts"></iframe>

Thanks for any help!

errant kayak Feb 4, 2024, 5:45 AM

#

I see now that people have had to request sites to be added to the CSP, is there a way I could request Discord to be added this way? (https://phabricator.miraheze.org/T11129)

oak flame Feb 4, 2024, 2:00 PM

#

https://dev.miraheze.org/wiki/Replacements_for_the_Widgets_extension should explain how to add iframes

Miraheze Developers Wiki

Replacements for the Widgets extension

Following the permanent removal of the Widgets extension due to a security vulnerability, and the potential for future risk, here are some viable replacement options:
Extensions: the EmbedVideo, TimedMediaHandler, Video, or YouTube extensions may be viable replacements.

JavaScript:

HTML:

Add the JavaScript to either MediaWiki:{Skin}.js, or M...

#

You can't just add the iframe in the page

#

The CSP does not stop wikitext being parsed

errant kayak Feb 4, 2024, 10:31 PM

#

OHHH thank you! i will give this a try!

#Trying to add Discord widget iframe