jekyll-embed-urls 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 35c0f485187e769d27b2459ff7a12c24ed913ae2eff55ac9ba4867ca50717454
-  data.tar.gz: 27653e6672c5dfd60836db89f35a2c4ec7088ce1b65eced7f8a0be89564e586e
+  metadata.gz: 38bf8e56a0b446544b161c172f12b013b89b9f30907888cc57eaef2a9c9abc1b
+  data.tar.gz: 765fa0635ce932982fc14279fc007127883aab30c456887b9a166160477855c5
 SHA512:
-  metadata.gz: 9efcd5d53d829267f0f58c3f44eb7ffd23da559fea2e8af102300beb7038b57acb0a2f5c8e263bd3ea2c54e7b8b708feb8eff18b9fcab665bb8cc007072001f8
-  data.tar.gz: 1cc3c943f041820ca211b63561897404ae24e8d0da2889b200a0041c41859b203f452497c41575f4187374ec3339919adf46228f851ac4e82e3c0dc95dcd5cd7
+  metadata.gz: 6434287bd81791b0420c0d80b995d37222c80370db283f2297b7b9542792f069315621d59e8de1b79aca2597381cc875c0a0313b6e0aa8130b7defb50fe03ab7
+  data.tar.gz: 5a41d00060687e833e82672ffbd44dfc99aa67b3ff9ab42167a5db58085a96b0a1c538f1203396ba6c102e28c7b98f77e48a1e0b5832433fa1115e3b2f2a1d9d

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## v0.2.0
+
+* Use a sandboxed iframe
+
 ## v0.1.0
 
 * Supports OEmbed!

data/README.md

@@ -46,6 +46,9 @@ https://www.invidio.us/watch?v=XYHnd4boUoM
 **Note:** The URL can be anywhere, at the start, end or between
 paragraphs but it needs to be in its own block of text.
 
+**Another note:** [Invidious doesn't support OEmbed
+yet](https://github.com/omarroth/invidious/issues/1222) :P
+
 
 ## Contributing
 

data/lib/jekyll-embed-urls.rb

@@ -1,8 +1,6 @@
 require 'oembed'
+require 'cgi'
 
-OEmbed::Providers.register_all
-OEmbed::Providers.register_fallback(OEmbed::ProviderDiscovery,
-                                    OEmbed::Providers::Noembed)
 
 # Process the content of documents before rendering them to find URLs in
 # a block.
@@ -18,25 +16,44 @@ Jekyll::Hooks.register :site, :pre_render do |site|
     # Split texts by markdown blocks
     doc.content = doc.content.split("\n\n").map do |p|
       # Only process lines with URLs
-      if %r{https?://} =~ p
+      if %r{\Ahttps?://} =~ p
         # Remove empty characters
         p.strip!
 
+        # @see {https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox}
+        same_origin = p.start_with? site.config['url']
+
         Jekyll.logger.debug "Finding OEmbed content for #{p}"
         # Cache the results
         cache.getset(p) do
           Jekyll.logger.debug "=> Not cached, obtaining..."
 
-          OEmbed::Providers.get(p).html
-        # If the URL doesn't support OEmbed just return an external
-        # link.
+          result = OEmbed::Providers.get(p)
+
+          # Return a sandboxed iframe with the size of the HTML.  We
+          # only allow scripts to run inside the iframe and nothing
+          # else.
+          <<~IFRAME
+            <iframe
+              referrerpolicy="no-referrer"
+              sandbox="allow-scripts #{same_origin ? '' : 'allow-same-origin'}"
+              style="min-width:#{result.width}px;min-height:#{result.height || 0}px"
+              srcdoc="#{CGI.escape_html result.html}"
+              ></iframe>
+          IFRAME
+
+          result.html
         rescue OEmbed::NotFound => e
-          Jekyll.logger.warn "#{p} is not oembeddable, showing as URL"
+          # If the URL doesn't support OEmbed just return an external
+          # link.
+          #
+          # TODO: Fetch information with OGP and render a template.
+          Jekyll.logger.warn "#{p} is not oembeddable or URL can't be fetched, showing as URL"
 
           "<a href=\"#{p}\" target=\"_blank\">#{p}</a>"
         end
-      # Otherwise return the original block
       else
+        # Otherwise return the original block
         p
       end
     # Rebuild the content

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jekyll-embed-urls
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - f
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-06-06 00:00:00.000000000 Z
+date: 2020-07-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jekyll
@@ -25,7 +25,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '4'
 - !ruby/object:Gem::Dependency
-  name: oembed
+  name: ruby-oembed
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
@@ -61,7 +61,7 @@ metadata:
   source_code_uri: https://0xacab.org/sutty/jekyll/jekyll-embed-urls
   changelog_uri: https://0xacab.org/sutty/jekyll/jekyll-embed-urls/-/blob/master/CHANGELOG.md
   documentation_uri: https://rubydoc.info/gems/jekyll-embed-urls
-post_install_message: 
+post_install_message:
 rdoc_options:
 - "--title"
 - jekyll-embed-urls - Embed URL previsualization in Jekyll posts
@@ -76,7 +76,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - "~>"
     - !ruby/object:Gem::Version
-      version: '2'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -84,7 +84,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubygems_version: 3.0.3
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Embed URL previsualization in Jekyll posts
 test_files: []