[#48042] - [j6] plugin TinyMCE - the contents of the IFRAME are blocked at the relative address
- New
- Medium
- Build: 5.4-dev
- # 48042
What happened?
-
By default, the plugin uses tag cleanup from joomla settings. By default, the plugin processes the iframe tag like this, checks if the address belongs to video hosting sites and checks if the iframe belongs to the current domain.
-
In addition, the second function is if the specified domain belongs to the current domain, then the plugin deletes the address of the current domain, leaving only the address of folders and files ...
But the plugin inserts a blocking SANDBOX attribute into the iframe tag when it does not see the allowed domains in the address. first, the domain is deleted from the absolute address. And then it checks for the presence of the current domain in the address and blocks the contents of the SANDBOX.
Version
6.1
Expected result
Inserting an iframe into an article on a pdf document located in the IMAGES folder should always be displayed after saving
<p>
<iframe src="images/docs/20260702_1508_Preyskurant_Cen_46.pdf" sandbox=""></iframe>
</p>Actual result
<p>
<iframe src="images/docs/20260702_1508_Preyskurant_Cen_46.pdf" ></iframe>
</p>System Information
No response
Additional Comments
No response
joomla-cms-bot
- | Labels |
Added:
No Code Attached Yet
bug
|
||
This is the intended behaviour from tinyMCE for increased security.
There are options in the plugin that let you either disable sandbox completely OR add specific domains to be excluded from the sandbox. OR am I misunderstanding something?
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address "https://my-site.com"
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
Thus. In the default mode, you cannot use an IFRAME to place documents on your site. The SANDBOX IFRAMES mode must be disabled for each site.
In short, an IFRAME for your site with global settings is not functional at all.
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/20260702_1508_Preyskurant_Cen_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
Thus. In the default mode, you cannot use an IFRAME to place documents on self site. The SANDBOX IFRAMES mode must be disabled for each site in plugin config.
In short, an IFRAME for every site with global settings is not functional at all.
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/document_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/document_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/document_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
Thus. In the default mode, you cannot use an IFRAME to place documents on self site. The SANDBOX IFRAMES mode must be disabled for each site in plugin config.
In short, an IFRAME for every site with global settings is not functional at all.
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/document_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/document_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/document_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
Thus. In the default mode, you cannot use an IFRAME to place documents on self site. The SANDBOX IFRAMES mode must be disabled for each site in plugin config.
In short, an IFRAME for every site with global settings is not functional at all.
You are right, there is a SANDOBX IFRAMES option in the settings. I turned off this switch so that I could use it.
Precisely because there was a problem, I had to disable this switch.
- I want to insert an iframe with a PDF file into an article, the file is located in the IMAGES folder.
- I insert the code into the article:
<iframe src="html://my-site.com/images/docs/document_46.pdf" ></iframe>- Saving article.
- PDF document show in main page. It works, it's good.
- I save the same article without changes again in the article editor without changes.
- The PDF document is no longer displayed on the main page. The document is displayed with the content blocked. That is, the IFRAME is empty with the label BLOCKED.
I didn't change anything, I just clicked the SAVE button a second time.
Looking at the code:
<iframe src="/images/docs/document_46.pdf" sandbox=""></iframe>In other words, the iframe address src="/images/docs/document_46.pdf" the plugin was recognized as suspicious.
He recognized it as suspicious because there is no word in the address https://my-site.com
Thus. In the default mode, you cannot use an IFRAME to place documents on self site. The SANDBOX IFRAMES mode must be disabled for each site in plugin config.
In short, an IFRAME for every site with global settings is not functional at all.
In short, if I insert the code into the article, it won't work.
<iframe src="/images/docs/document_46.pdf" ></iframe>
This is the intended behaviour from tinyMCE for increased security.
There are options in the plugin that let you either disable sandbox completely OR add specific domains to be excluded from the sandbox