Problem/Motivation

We need a way to enable lesson contributors on learndrupal.org to include video in their lessons without exposing us to XSS.

Proposed resolution

TBD

Remaining tasks

Next step: Review modules that provide this sort of functionality and figure out how to incorporate it into Lessons module (Media, Video Filter, Video Filter Field, oEmbed)

User interface changes

TBD

API changes

TBD

Comments

Drupalearner’s picture

In the short term, until an alternative solution is in place, would it be acceptable for the lesson video creators to provide links from their lessons to their own sites or to third party sites e.g. vimeo.com where the videos are available, so they get some direct or indirect credit for having produced the material? This seems to be what is done elsewhere for other projects and wouldn't hold up production of material.

Where there is a video pertinent to a lesson perhaps it would best be made available by a link rather than rendered on the page, which will help in standardising lesson pages, and accessibility from various devices, and page loading times/server load etc.