discourse/lib/onebox/engine/motoko_onebox.rb
Blake Erickson 17116c440b
SECURITY: Restrict allowed URL patterns
Restrict allowed URL patterns for oneboxes.
2025-02-04 13:32:34 -03:00

29 lines
599 B
Ruby

# frozen_string_literal: true
module Onebox
module Engine
class MotokoOnebox
include Engine
include StandardEmbed
matches_domain("embed.motoko.org", "embed.smartcontracts.org")
requires_iframe_origins("https://embed.motoko.org", "https://embed.smartcontracts.org")
always_https
def to_html
get_oembed.html
end
def placeholder_html
::Onebox::Helpers.generic_placeholder_html
end
protected
def get_oembed_url
"https://embed.smartcontracts.org/services/onebox?url=#{url}"
end
end
end
end