I get a "You don't have permission to access /mybase_url/ckeditor_swf/getinfo on this server" error whenever I enter an address similar to "http://www.youtube.com/watch?v=NZB_M-XzQig"

If I manually enter "http://www.mywebsite.com/mybase_url/ckeditor_swf/getinfo?src=http%3A%2F%..." I get the same 403 error, however when I remove the 'http' and instead enter "http://www.mywebsite.com/mybase_url/ckeditor_swf/getinfo?src=www.youtube..." the page is not 403.

I ran through the code and it seems ckeditor_swf_getinfo() on line 49 of ckeditor_swf.module is not being loaded when there is the 403 error. Any ideas?

Comments

anrikun’s picture

anrikun commented
Title: 403 Forbidden » Youtube video IDs with dashes are rejected
Category: support » bug
Status: Active » Fixed

Thanks for reporting this!
This is a bug, now fixed.
Please download the last dev once it has been updated or grab it from GIT.

anrikun’s picture

anrikun commented

Backported to 6.x-2.x.

barfoo’s picture

barfoo commented
Title: Youtube video IDs with dashes are rejected » 403 Forbidden

Sorry, the title of this support request was incorrect. Did you mean the 403 error bug has already been fixed?

anrikun’s picture

anrikun commented

I have fixed a bug preventing Youtube video IDs with dashes to be rejected.
Do you still get a 403 error after upgrading to the last dev?

barfoo’s picture

barfoo commented

I get 403 when the url has 'http' in it. For example, http://www.youtube.com/watch?v=NZB_M-XzQig throws 403.

anrikun’s picture

anrikun commented
Title: 403 Forbidden » 403 Forbidden, Youtube video IDs with dashes are rejected

Sorry, you case is a completely different problem from what I first thought it was. Your problem is the same as:
http://drupal.org/node/942336#comment-4310710
So you need to ask your host to white-list "ckeditor_swf/getinfo" so that querystrings containing "http://" are not rejected.

Anyway, your post made me find a bug: Youtube video IDs with dashes were rejected. This bug is now fixed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.