mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-06 09:09:38 +03:00
Unable to embed iframe with source external to site #2728
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @kaylahynes on GitHub (Mar 29, 2022).
Describe the Bug
Embedded Iframes from external sources are shown as blocked due to some sort of environment variable.
Steps to Reproduce
Create new page
Embed iframe from an external source(eg. google forms)
Expected Behaviour
Successful embed
Screenshots or Additional Context
Browser Details
Google Chrome
Exact BookStack Version
Latest
PHP Version
No response
Hosting Environment
Ubuntu 20.04 LTS Server
@ssddanbrown commented on GitHub (Mar 29, 2022):
Hi @meepmeep22,
This is not a bug but a security measure to control content within your BookStack instance via browser CSP controls.
Please see the "IFrame Source Control" section of our security documentation for more detail:
https://www.bookstackapp.com/docs/admin/security/#iframe-src-control
@ssddanbrown commented on GitHub (Apr 3, 2022):
Since there's been no further follow-up or discussion I'll close this off.