Eugen Rochko
Yo does anyone know how we should make it so embedded toots iframes have the correct height of the toot? Anyone with experience creating embeds for stuff?
Aug 30, 2017 at 8:39pmWeb
Show threadEugen RochkoAug 30, 2017
As far as I'm aware the only way is to include a <script> along with the <iframe> code which load from the same domain as the iframe, because otherwise JS cannot access the iframe's content
Show threadMarcin CieślakAug 30, 2017
@Gargron why include scripts?
Show threadEugen RochkoAug 30, 2017
@saper because <iframe> does not resize together with its inner content
Show threadMarcin CieślakAug 30, 2017
@Gargron ok maybe iframe is a wrong tool for the job, don't know
Show threadEugen RochkoAug 30, 2017
@saper do you have another mechanism by which content from one website is included on another? 🤔
Show threadMarcin CieślakAug 30, 2017
@Gargron some js importing toots via API? If JS is required indeed?
Show threadINACTIVEAug 30, 2017

@saper @Gargron JS rendering a toot via API / JSON isn't a bad way to go at all, you'd just handle all of the styling on the recipient end. As a bonus, it can be integrated into something like WordPress as a plugin.

Given the decentralized nature of the network, I can't advocate using something like OEmbed, since that often requires whitelisting domains for the renderer (or ignoring a whitelist entirely).

Show threadEugen RochkoAug 30, 2017
@deadsuperhero @saper OEmbed does not require whitelists. OEmbed is discovery-based.
Show threadINACTIVEAug 30, 2017
@Gargron @saper But as a sane practice, you would probably want to only allow a short list of providers. At the very least, this seems to be something that is practiced by networks that consume said embeds in a social stream.
Show threadEugen RochkoAug 30, 2017
@deadsuperhero @saper Facebook, Discord and Twitter use Open Graph tags, not OEmbed. Discourse *does* use OEmbed, but their implementation *does* use a whitelist (however the argument for it is simply "back when we implemented it nobody used OEmbed except these sites"). I don't know of any other social streams that embed anything
Show threadnicolas ⁂Aug 30, 2017
@Gargron I have no idea, but Twitter does this thing which is super nice for embedded tweets: they’re blockquotes, not iframes. So the content is kept in articles inserting the tweets, and it works nicely for accessibility and posterity :)
Show threadEugen RochkoAug 30, 2017
@nclm It's a blockquote and a script, and when the script loads it replaces the blockquote with an iframe.
Show threadnicolas ⁂Aug 30, 2017
@Gargron Yes, you’re right! But as long as there is a blockquote there, I’m happy (Firefox’s tracking protection actually blocks the thing that makes them into frames, so I’m used to the blockquotes alone).
Show threadEugen RochkoAug 30, 2017
@nclm Right, but in case <script> is blocked, an iframe is still better than a blockquote, no? Because it displays rich content, albeit at wrong height..?