Iframes #5345

Closed
opened 2026-02-05 09:59:07 +03:00 by OVERLORD · 7 comments
Owner

Originally created by @ciompi on GitHub (Jul 4, 2025).

Describe the feature you'd like

Dear Sirs, is it yet implemented or can be implemeneted the possibility to insert an iframe in a page?
We (arpa,piemonte.it) are using Metabase for data analisys and reporting, embedding ghaphs and dashboard in BookStack pages could be a great feature for us.
We use also Shiny, so also integrating some Shiny objects could be interesting.
Grazie
Gianmario Nava

Describe the benefits this would bring to existing BookStack users

Integrating information and data representation source other than images and videos

Can the goal of this request already be achieved via other means?

Don't know

Have you searched for an existing open/closed issue?

  • I have searched for existing issues and none cover my fundamental request

How long have you been using BookStack?

Not using yet, just scoping

Additional context

We are looking for a solution to produce both periodic and occasional reports on environmental topics and publish them as web pages and pdf.

Originally created by @ciompi on GitHub (Jul 4, 2025). ### Describe the feature you'd like Dear Sirs, is it yet implemented or can be implemeneted the possibility to insert an iframe in a page? We (arpa,piemonte.it) are using Metabase for data analisys and reporting, embedding ghaphs and dashboard in BookStack pages could be a great feature for us. We use also Shiny, so also integrating some Shiny objects could be interesting. Grazie Gianmario Nava ### Describe the benefits this would bring to existing BookStack users Integrating information and data representation source other than images and videos ### Can the goal of this request already be achieved via other means? Don't know ### Have you searched for an existing open/closed issue? - [x] I have searched for existing issues and none cover my fundamental request ### How long have you been using BookStack? Not using yet, just scoping ### Additional context We are looking for a solution to produce both periodic and occasional reports on environmental topics and publish them as web pages and pdf.
OVERLORD added the 🐕 Support label 2026-02-05 09:59:07 +03:00
Author
Owner
@ciompi commented on GitHub (Jul 4, 2025): examples of iframes to be added: https://utility.arpa.piemonte.it/metabase/public/dashboard/51850d7a-2ef3-4e06-b1c3-14c3a70c6ce4 https://utility.arpa.piemonte.it/metabase/public/question/61098b65-81f2-45ce-8ed1-d65d38495f50
Author
Owner

@ssddanbrown commented on GitHub (Jul 4, 2025):

Hi @ciompi,
You can add iframe based content via the media embed tool in the WYSIWYG editor:

Image

You will also need to set/alter the "Iframe Source Control" option in your BookStack configuration to allow iframes from your desired origins/sites.
It's still possible that the external (if not intended to be embedded) could use its own security measures to prevent being embedded, but if they support embedding via iframe then the above methods should work for you in BookStack.

@ssddanbrown commented on GitHub (Jul 4, 2025): Hi @ciompi, You can add iframe based content via the media embed tool in the WYSIWYG editor: <img width="600" height="536" alt="Image" src="https://github.com/user-attachments/assets/afc57f35-daf0-4d69-945c-a369e1e4f2c3" /> You will also need to set/alter the ["Iframe Source Control"](https://www.bookstackapp.com/docs/admin/security/#iframe-source-control) option in your BookStack configuration to allow iframes from your desired origins/sites. It's still possible that the external (if not intended to be embedded) could use its own security measures to prevent being embedded, but if they support embedding via iframe then the above methods should work for you in BookStack.
Author
Owner

@ssddanbrown commented on GitHub (Aug 9, 2025):

Since there's been no further follow-up I'm going to close this off.

@ssddanbrown commented on GitHub (Aug 9, 2025): Since there's been no further follow-up I'm going to close this off.
Author
Owner

@ciompi commented on GitHub (Nov 19, 2025):

Dear Mr. Brown, I apologize for not responding to your kind tip, I have tried to add to the .env file the directive to allow Iframes from a Metabase server, here a page intended to be public: https://utility.arpa.piemonte.it/metabase/public/question/fadd092f-a592-4a51-84dc-88701ab4a4c7,
and here the configuration in the .env file:
APP_URL=http://10.127.137.247:8000
APP_NAME="BookStack"

Database details

DB_HOST=localhost
DB_DATABASE=bookstack
DB_USERNAME=bookstack
DB_PASSWORD=xxxxxx

Sets application language to Italian

APP_LANG=it
#Sets the timezone
APP_TIMEZONE=Europe/Berlin

Adds a single host for Iframes

ALLOWED_IFRAME_SOURCES="https://*.arpa.piemonte.it"

I have tried also with "https://utility.arpa.piemonte.it" and with "https://utility.arpa.piemonte.it/metabase/" with no success.
I have also run sudo systemctl restart apache2, sudo php artisan config:clear and sudo php artisan cache:clear after every change.
Bookstak seems to try to load a video every time I insert a link to embed.

What I do wrong?

Grazie
Gianmario Nava
www.arpa.piemonte.it


Da: Dan Brown @.>
Inviato: sabato 9 agosto 2025 10:55
A: BookStackApp/BookStack @.
>
Cc: gianmario nava @.>; Mention @.>
Oggetto: Re: [BookStackApp/BookStack] Iframes (Issue #5693)

[https://avatars.githubusercontent.com/u/8343178?s=20&v=4]ssddanbrown left a comment (BookStackApp/BookStack#5693)https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3170506026

Since there's been no further follow-up I'm going to close this off.


Reply to this email directly, view it on GitHubhttps://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3170506026, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AKGSTXL3D6FIYMDEKKKDHID3MWZPXAVCNFSM6AAAAACAY3XIHSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCNZQGUYDMMBSGY.
You are receiving this because you were mentioned.Message ID: @.***>

@ciompi commented on GitHub (Nov 19, 2025): Dear Mr. Brown, I apologize for not responding to your kind tip, I have tried to add to the .env file the directive to allow Iframes from a Metabase server, here a page intended to be public: https://utility.arpa.piemonte.it/metabase/public/question/fadd092f-a592-4a51-84dc-88701ab4a4c7, and here the configuration in the .env file: APP_URL=http://10.127.137.247:8000 APP_NAME="BookStack" # Database details DB_HOST=localhost DB_DATABASE=bookstack DB_USERNAME=bookstack DB_PASSWORD=xxxxxx # Sets application language to Italian APP_LANG=it #Sets the timezone APP_TIMEZONE=Europe/Berlin # Adds a single host for Iframes ALLOWED_IFRAME_SOURCES="https://*.arpa.piemonte.it" I have tried also with "https://utility.arpa.piemonte.it" and with "https://utility.arpa.piemonte.it/metabase/" with no success. I have also run sudo systemctl restart apache2, sudo php artisan config:clear and sudo php artisan cache:clear after every change. Bookstak seems to try to load a video every time I insert a link to embed. What I do wrong? Grazie Gianmario Nava www.arpa.piemonte.it ________________________________ Da: Dan Brown ***@***.***> Inviato: sabato 9 agosto 2025 10:55 A: BookStackApp/BookStack ***@***.***> Cc: gianmario nava ***@***.***>; Mention ***@***.***> Oggetto: Re: [BookStackApp/BookStack] Iframes (Issue #5693) [https://avatars.githubusercontent.com/u/8343178?s=20&v=4]ssddanbrown left a comment (BookStackApp/BookStack#5693)<https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3170506026> Since there's been no further follow-up I'm going to close this off. — Reply to this email directly, view it on GitHub<https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3170506026>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AKGSTXL3D6FIYMDEKKKDHID3MWZPXAVCNFSM6AAAAACAY3XIHSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCNZQGUYDMMBSGY>. You are receiving this because you were mentioned.Message ID: ***@***.***>
Author
Owner

@ssddanbrown commented on GitHub (Nov 19, 2025):

Bookstak seems to try to load a video every time I insert a link to embed.

It sounds like you are using the default WYSIWYG editor, and just adding via a link, in which case the editor is attempting to guess the type of embed, but that results in the wrong embed type.

Instead, when inserting an embed, go to the embed tab of the popup and insert the following code:

<iframe src="https://utility.arpa.piemonte.it/metabase/public/question/fadd092f-a592-4a51-84dc-88701ab4a4c7" width="600" height="500"></iframe>

For reference:

Image
@ssddanbrown commented on GitHub (Nov 19, 2025): > Bookstak seems to try to load a video every time I insert a link to embed. It sounds like you are using the default WYSIWYG editor, and just adding via a link, in which case the editor is attempting to guess the type of embed, but that results in the wrong embed type. Instead, when inserting an embed, go to the embed tab of the popup and insert the following code: ```html <iframe src="https://utility.arpa.piemonte.it/metabase/public/question/fadd092f-a592-4a51-84dc-88701ab4a4c7" width="600" height="500"></iframe> ``` For reference: <img width="1333" height="865" alt="Image" src="https://github.com/user-attachments/assets/3c2a33fa-b56d-46fd-b6b6-829fb4adc068" />
Author
Owner

@ciompi commented on GitHub (Nov 19, 2025):

Hi, it works just fine!
So no configuration issues.
We were used in Drupal to insert the address of a page to embed in a pop up similar to yours:
drupal iframe.pnghttps://arpapiemonte-my.sharepoint.com/:i:/g/personal/giannava_arpa_piemonte_it/EXKMI-HaCMxHvtDork4eGJkBL6Xc8uaT89G-YqbaaN9Caw?e=RCqiHF
the markups and dimensions being addedd automatically as in the case of the media in the pop up
(something like:

) thus our confusion. Grazie Ottimo lavoro Codialità gmn ________________________________ Da: Dan Brown ***@***.***> Inviato: mercoledì 19 novembre 2025 12:49 A: BookStackApp/BookStack ***@***.***> Cc: gianmario nava ***@***.***>; Mention ***@***.***> Oggetto: Re: [BookStackApp/BookStack] Iframes (Issue #5693)

[https://avatars.githubusercontent.com/u/8343178?s=20&v=4]ssddanbrown left a comment (BookStackApp/BookStack#5693)https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3552261424

Bookstak seems to try to load a video every time I insert a link to embed.

It sounds like you are using the default WYSIWYG editor, and just adding via a link, in which case the editor is attempting to guess the type of embed, but that results in the wrong embed type.

Instead, when inserting an embed, go to the embed tab of the popup and insert the following code:

For reference:

image.png (view on web)https://github.com/user-attachments/assets/3c2a33fa-b56d-46fd-b6b6-829fb4adc068


Reply to this email directly, view it on GitHubhttps://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3552261424, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AKGSTXLSSMWGSZ62QFJ7VYD35RKODAVCNFSM6AAAAACAY3XIHSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKNJSGI3DCNBSGQ.
You are receiving this because you were mentioned.Message ID: @.***>

@ciompi commented on GitHub (Nov 19, 2025): Hi, it works just fine! So no configuration issues. We were used in Drupal to insert the address of a page to embed in a pop up similar to yours: drupal iframe.png<https://arpapiemonte-my.sharepoint.com/:i:/g/personal/giannava_arpa_piemonte_it/EXKMI-HaCMxHvtDork4eGJkBL6Xc8uaT89G-YqbaaN9Caw?e=RCqiHF> the markups and dimensions being addedd automatically as in the case of the media in the pop up (something like: <iframe width="100%" height="500" name="iframe-field_iframe_metabase-2443" id="iframe-field_iframe_metabase-2443" class="rsa_metabase" title="Benzene media annuale 2024" allow="accelerometer;autoplay;camera;encrypted-media;geolocation;gyroscope;microphone;payment;picture-in-picture" src="https://utility.arpa.piemonte.it/metabase/public/question/33d22bb6-82bf-429f-8983-dd4371517bb0"> Your browser does not support iframes, but you can visit <a href="https://utility.arpa.piemonte.it/metabase/public/question/33d22bb6-82bf-429f-8983-dd4371517bb0"></a> </iframe>) thus our confusion. Grazie Ottimo lavoro Codialità gmn ________________________________ Da: Dan Brown ***@***.***> Inviato: mercoledì 19 novembre 2025 12:49 A: BookStackApp/BookStack ***@***.***> Cc: gianmario nava ***@***.***>; Mention ***@***.***> Oggetto: Re: [BookStackApp/BookStack] Iframes (Issue #5693) [https://avatars.githubusercontent.com/u/8343178?s=20&v=4]ssddanbrown left a comment (BookStackApp/BookStack#5693)<https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3552261424> Bookstak seems to try to load a video every time I insert a link to embed. It sounds like you are using the default WYSIWYG editor, and just adding via a link, in which case the editor is attempting to guess the type of embed, but that results in the wrong embed type. Instead, when inserting an embed, go to the embed tab of the popup and insert the following code: <iframe src="https://utility.arpa.piemonte.it/metabase/public/question/fadd092f-a592-4a51-84dc-88701ab4a4c7" width="600" height="500"></iframe> For reference: image.png (view on web)<https://github.com/user-attachments/assets/3c2a33fa-b56d-46fd-b6b6-829fb4adc068> — Reply to this email directly, view it on GitHub<https://github.com/BookStackApp/BookStack/issues/5693#issuecomment-3552261424>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AKGSTXLSSMWGSZ62QFJ7VYD35RKODAVCNFSM6AAAAACAY3XIHSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKNJSGI3DCNBSGQ>. You are receiving this because you were mentioned.Message ID: ***@***.***>
Author
Owner

@ssddanbrown commented on GitHub (Nov 19, 2025):

Yeah, the media embed will attempt to do that but our window is not iframe specific, it's used for other media content also like video, so if just a link is provided it has to attempt to guess the content type.

I believe this scenario with your link would be simpler when using the new BookStack WYSIWYG editor, since that will more often default to an iframe-based embed instead of a video embed.

Since that's working now I'll therefore close this off.

@ssddanbrown commented on GitHub (Nov 19, 2025): Yeah, the media embed will attempt to do that but our window is not iframe specific, it's used for other media content also like video, so if just a link is provided it has to attempt to guess the content type. I believe this scenario with your link would be simpler when using the new BookStack WYSIWYG editor, since that will more often default to an iframe-based embed instead of a video embed. Since that's working now I'll therefore close this off.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#5345