discourse/lib/onebox/engine/audio_com_onebox.rb
Blake Erickson 17116c440b
SECURITY: Restrict allowed URL patterns
Restrict allowed URL patterns for oneboxes.
2025-02-04 13:32:34 -03:00

34 lines
751 B
Ruby

# frozen_string_literal: true
module Onebox
module Engine
class AudioComOnebox
include Engine
include StandardEmbed
always_https
requires_iframe_origins "https://audio.com"
matches_domain("audio.com")
def to_html
oembed = get_oembed
oembed.html.gsub("visual=true", "visual=false")
end
def placeholder_html
oembed = get_oembed
return if oembed.thumbnail_url.blank?
"<img src='#{oembed.thumbnail_url}' #{oembed.title_attr}>"
end
protected
def get_oembed_url
oembed_url = "https://api.audio.com/oembed?url=#{url}"
oembed_url += "&maxheight=228" unless url["/collections/"]
oembed_url
end
end
end
end