Embed video with tinyMCE doesn't work with https

Hi,

I'm using Boonex 7.1.6 and everything was working fine before I upgraded to https. Embeded videos from youtube were properly showing in users posts. Now I upgraded to https, and when a user clicks on the "video" icon in TinyMCE, selects "iframe" and adds a URL from youtube using http:// (most users do this), the video shows blank. The same operation if my boonex site is in http works perfectly. If you embed a link to youtube with https:// in the URL it then works.

 

My guess is that for security reasons embedding http content inside an https page is stopped by the browser.

 

The problem is that I want to use https to avoid the annoying messages from firefox of the site not being secure. How to fix this problem? Anyone else experiencing the same?

 

Thanks.

Quote · 20 Jun 2017

hello.

 

Delete the site cahe in the admin panel of your dolphin. And also delete the cache in your internet browser. Add now the link video to see if it will be solved

Quote · 21 Jun 2017

Hi,

I tried what you suggest, but makes no difference. In the top right of the browser it shows an icon saying the page is trying to display a non secure content. Only if I enable it then it works. Or if I paste the video link as https. How are other sites doing? allowing only https video links seems not very user friendly.

Quote · 21 Jun 2017

 

I tried what you suggest, but makes no difference. In the top right of the browser it shows an icon saying the page is trying to display a non secure content. Only if I enable it then it works. Or if I paste the video link as https. How are other sites doing? allowing only https video links seems not very user friendly.

Actually when youtube video embed is pasted anywhere then embed is automatically converted to use the same protocol like on your site. The only exception is for Admins - in this case video embed is posted the same as pasted by Admin without any conversions. 

Also if you changed your site from http to https then old videos stay the same like they were posted before, but new youtube videos should be converted to https when they are posted. However old videos should be converted as well upon post editing.

Rules → http://www.boonex.com/terms
Quote · 24 Jun 2017

 

then embed is automatically converted to use the same protocol like on your site. The only exception is for Admins

 Hi, Alex. How to disable this great feature?:))

Quote · 6 Sep 2017

 

 

then embed is automatically converted to use the same protocol like on your site. The only exception is for Admins

 Hi, Alex. How to disable this great feature?:))

You just need to note the URL of the embed when you embed as admin.

Geeks, making the world a better place
Quote · 7 Sep 2017

 

 

 

then embed is automatically converted to use the same protocol like on your site. The only exception is for Admins

 Hi, Alex. How to disable this great feature?:))

You just need to note the URL of the embed when you embed as admin.

Sure. My question is: how standard user, not just admin, can do the same thing? 

The point is that we have very similar problematic behavior on UNA, IMHO it's indicate similar basic concept in Boonex development which needs to get change.

Quote · 7 Sep 2017

Boonex has removed any hard coding of http in the code, and that is the same for UNA.  You can not ask them to worry about what your members may do.  If members can post http code then you need to see what can be done so that the code is transformed to https; that falls on you as the sys admin.

Geeks, making the world a better place
Quote · 7 Sep 2017

GG:)

You're right, I have responsibility too.

But you're missing the point: 

1. I only want that my Standard user may Post things as admin can. NB - Post, not to administrate.

2. In my here enclosed link to UNA the post was in htpps/soundcloud  and it was converted to htpps/yotube . I'm not talking about http/https crossconvertions.

3. Why, if "2=true" I'm posting it here? because AlexT's words: "Only admin's post are not converted", which tells me that there are some similarity in code's behavior, So I've posted it here. I want to let my ppl go to Post (NB - to post, not to administrate) as admin can, and it need, IMHO, some code changes. I'm only interested - what change it needs, that's all.

Maybe I'm wrong and there are some PHP features that converts embed/soundcloud (and many others) to embed/youtube... Google knows nothing about it:))

Quote · 7 Sep 2017

YouTube iframe embeds are converted in this file:

plugins/htmlpurifier/standalone/HTMLPurifier/Filter/YoutubeIframe.php

the following line regarding the protocol conversion:

$sProto = 0 == strncmp('https', BX_DOL_URL_ROOT, 5) ? 'https' : 'http';

 

Rules → http://www.boonex.com/terms
Quote · 9 Sep 2017

If you can explain to me more clearly what is happening, maybe I can assist you.  Be as detailed as possible.

Geeks, making the world a better place
Quote · 9 Sep 2017

 

If you can explain to me more clearly what is happening, maybe I can assist you.  Be as detailed as possible.

 If you asking me - the detailed explanation of my question with example is on UNA site. As well as AlexT answer:))

Interested - what if copy all "Youtube named" files from HTMLpurifier/Filter folder and to change in copies all words "Youtube" to "Soundcloud"?:)

Quote · 9 Sep 2017

It could probably work if the format of SoundCloud embed is the same as youtube embed, but usually there are some changes which need to be considered as well. Also you will need to add this filter into inc/utils.inc.php file near ~653 line:

$oConfig->set('Filter.Custom', array (new HTMLPurifier_Filter_LocalMovie(), new HTMLPurifier_Filter_YouTube(), new HTMLPurifier_Filter_YoutubeIframe(), new HTMLPurifier_Filter_AddBxLinksClass()));
Interested - what if copy all "Youtube named" files from HTMLpurifier/Filter folder and to change in copies all words "Youtube" to "Soundcloud"?:)

 

Rules → http://www.boonex.com/terms
Quote · 9 Sep 2017

 

 

If you can explain to me more clearly what is happening, maybe I can assist you.  Be as detailed as possible.

 If you asking me - the detailed explanation of my question with example is on UNA site. As well as AlexT answer:))

Interested - what if copy all "Youtube named" files from HTMLpurifier/Filter folder and to change in copies all words "Youtube" to "Soundcloud"?:)

We are here on Boonex.com, not UNA.  If you want me to jump through the hoops to help you it is not going to happen.  What was preventing you from copying and pasting from UNA to here?  I am not under any obligation to help you and I am less inclined to do so now.

Geeks, making the world a better place
Quote · 9 Sep 2017

OK, so your post did not really have anything to do with https but iframes.  See, that is why I asked for details.  I did decide to visit that UNA post.

 

Take a look at this thread by your friendly neighbour Geek Girl:

https://www.boonex.com/forums/topic/HTMLpurifier-adding-other-iframe-conditions-.htm

Geeks, making the world a better place
Quote · 9 Sep 2017

And by the way, YouTube has been on https for some time now, all their embed URLs are https so if your members grab a YouTube URL and it is http, then they are changing it.  The same holds true for the iframe embed code.  I just checked an embed and it is https and TinyMCE does not alter that.  If you are seeing https being changed to http, then it is not YouTube or TinyMCE that is doing it.

Geeks, making the world a better place
Quote · 9 Sep 2017
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.