Generate correct embeds for Youtube videos in Atom/RSS

Nov 25, 2009 19:38


Title
Generate correct embeds for Youtube videos in Atom/RSS

Short, concise description of the idea
Livejournal should generate correct HTML in RSS/Atom for LJ entries which contain Youtube videos.

Full description of the ideaWhen I make a Livejournal post with a Youtube video in it, the RSS and Atom feeds that LiveJournal generates for it are wrong ( Read more... )

embedding, syndication, § migrated

Leave a comment

Comments 13

azurelunatic November 26 2009, 05:28:10 UTC
Thank you very much for the illustrative example. That song has been in my head all week.

Reply


andy November 26 2009, 05:50:19 UTC
As much as this idea is reasonable, there is a security issue involved here - I don't think that it's possible to insert an iframe in an RSS feed, so it will need to insert Flash embeds w/o an iframe, which possibly would enable hackers to do some hideous things. As such, there would need to be maintained a whitelist of 3rd party sites we can trust not to do that, which adds some work for the Support people, etc.

Reply

jwz November 26 2009, 05:52:15 UTC
That doesn't make any sense.

*I* posted an embed to *my* journal.

I would like the *characters that I typed* to show up in the *RSS feed of my journal*.

I did not type an iframe. I do not want it to emit an iframe. I want it to emit literally what I posted.

Reply

andy November 26 2009, 05:55:53 UTC
Sorry I didn't explain that clearly. See, if I post a Flash embed that steals user's cookie files, it will steal your cookie files for LiveJournal when you see my post, too. And if I then use these cookies I've stolen from you, I could misrepresent myself to LiveJournal to play with your user data. Does that make sense?

Reply

andy November 26 2009, 05:57:58 UTC
And that is the very reason LJ restricts inserting iframes/JavaScript in user content altogether; that's also why LJ emits iframes - this is to put embeds in a different "security sandbox" where users' cookies are in principle not accessible.

Reply


charliemc November 26 2009, 09:37:26 UTC
Yes, please.

Reply


Migrated boredinsomniac November 18 2010, 07:27:29 UTC
This change has been migrated for future implementation.

LJSV-106

Reply


rocketsan May 26 2011, 06:23:58 UTC
Request for API to get embed contents by its ID ().

Reply


Leave a comment

Up