discourse/app/views/layouts/embed.html.erb

<!DOCTYPE html>
<html<%= raw @embeddable_css_class -%>>
  <head>
    <meta charset="utf-8">

    <%= discourse_stylesheet_link_tag 'embed', theme_ids: nil %>
    <%- unless customization_disabled? %>
      <%= discourse_stylesheet_link_tag  :embedded_theme %>
    <%- end %>
    <%= preload_script 'break_string' %>

    <%- if @topic_view && @topic_view.page_title.present? %>
      <title><%= @topic_view.page_title %> - <%= SiteSetting.title %></title>
    <%- end %>

    <meta id="data-embedded" data-referer="<%= @data_referer %>">
    <%= preload_script 'embed-application' %>

    <%= yield :head %>
  </head>
  <body>
    <%= yield %>
  </body>
</html>
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2014-01-01 03:37:43 +08:00			`<!DOCTYPE html>`
Add @embeddable_css_class from embed_controller 2017-05-09 01:00:15 +08:00			`<html<%= raw @embeddable_css_class -%>>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2014-01-01 03:37:43 +08:00			`<head>`
Add page title and charset to embedded HTML 2015-09-19 04:12:41 +08:00			`<meta charset="utf-8">`

FEATURE: backend support for user-selectable components * FEATURE: backend support for user-selectable components * fix problems with previewing default theme * rename preview_key => preview_theme_id * omit default theme from child themes dropdown and try a different fix * cache & freeze stylesheets arrays 2018-08-08 12:46:34 +08:00			`<%= discourse_stylesheet_link_tag 'embed', theme_ids: nil %>`
FEATURE: Can create stylesheets for embedded comments 2015-08-07 05:18:00 +08:00			`<%- unless customization_disabled? %>`
FIX: embedding comments was broken 2017-04-14 10:44:22 +08:00			`<%= discourse_stylesheet_link_tag :embedded_theme %>`
FEATURE: Can create stylesheets for embedded comments 2015-08-07 05:18:00 +08:00			`<%- end %>`
FEATURE: try adding some preload hints for chrome 2017-04-17 23:52:43 +08:00			`<%= preload_script 'break_string' %>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2014-01-01 03:37:43 +08:00
Add page title and charset to embedded HTML 2015-09-19 04:12:41 +08:00			`<%- if @topic_view && @topic_view.page_title.present? %>`
			`<title><%= @topic_view.page_title %> - <%= SiteSetting.title %></title>`
			`<%- end %>`

FEATURE: Allow embedding to ignore HTTP REFERER New site setting: `embed_any_origin` that will send postMessages to wildcard origins `*` instead of the referer. Most of the time you won't want to do this, so the setting is default to `false`. However, there are certain situations where you want to allow embedding to send post messages when there is no HTTP REFERER. For example, if you created a native mobile app and you wanted to embed a list of Discourse topics as HTML. In the code your HTML would be a static file/string, which would not be able to send a referer. In this case, the site setting will allow the embed to work. From a security standpoint we currently only use `postMessage` to send data about the size of the HTML document and scroll position, so it should be enable if required with minimal security ramifications. 2019-09-11 00:27:07 +08:00			`<meta id="data-embedded" data-referer="<%= @data_referer %>">`
Extract inline JS on embedded comments (#6645) * use the meta refresh tag instead * extract inline JS in embedded comment 2018-11-22 23:02:58 +08:00			`<%= preload_script 'embed-application' %>`
Support for scrolling to another post in the iframe; more complicated than you'd think! 2014-01-04 03:45:22 +08:00
Extract inline JS on embedded comments (#6645) * use the meta refresh tag instead * extract inline JS in embedded comment 2018-11-22 23:02:58 +08:00			`<%= yield :head %>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2014-01-01 03:37:43 +08:00			`</head>`
			`<body>`
			`<%= yield %>`
			`</body>`
FIX: Links in the iframe should all be target=_blank 2014-03-20 22:57:18 +08:00			`</html>`