discourse/lib/onebox/engine/simplecast_onebox.rb
Blake Erickson 17116c440b
SECURITY: Restrict allowed URL patterns
Restrict allowed URL patterns for oneboxes.
2025-02-04 13:32:34 -03:00

35 lines
727 B
Ruby

# frozen_string_literal: true
module Onebox
module Engine
class SimplecastOnebox
include Engine
include StandardEmbed
matches_domain("simplecast.com", allow_subdomains: true)
always_https
requires_iframe_origins("https://player.simplecast.com")
def self.matches_path(path)
path.match?(%r{^/(episodes|s)/.+})
end
def to_html
get_oembed.html
end
def placeholder_html
oembed = get_oembed
return if oembed.thumbnail_url.blank?
"<img src='#{oembed.thumbnail_url}' #{oembed.title_attr}>"
end
private
def get_oembed_url
"https://api.simplecast.com/oembed?url=#{url}"
end
end
end
end