This project is not covered by Drupal’s security advisory policy.

Many great sites like YouTube, iFilm and NowPublic allow their media assets to be served to 3rd party websites (like this one). They usually offer snippets of code to be embedded in a web page that will then load a media object (usually Flash) from their servers. This module lets your site users embed such snippets into posts but gives you the power to decide which hosts to trust.

Here is an example of some code snippets from the sites mentioned above:

YouTube.com

<object width="425" height="350"><param name="movie" 
  value="http://www.youtube.com/v/BqLvBUSJucg">
  </param><embed src="http://www.youtube.com/v/BqLvBUSJucg" 
  type="application/x-shockwave-flash" width="425" height="350">
  </embed></object>

iFilm

<embed allowScriptAccess="never" width="448" height="365" 
  src="http://www.ifilm.com/efp" quality="high" bgcolor="000000" 
  name="efp" align="middle" type="application/x-shockwave-flash" 
  pluginspage="http://www.macromedia.com/go/getflashplayer" 
  flashvars="flvbaseclip=2761045" ></embed>

NowPublic

<script language="JavaScript" 
  src="http://media.nowpublic.com/js/7ae70d3f8c890cebc5c9633f49607ae2.js"></script>

To use this module, start by entering a number of hosts that you wish to allow. This is done from the settings page (admin/settings/embedfilter). Examples taken from the sites mentioned above would be:

  • youtube.com
  • ifilm.com
  • media.nowpublic.com

From the settings page you can also define some HTML that will be embedded before and after any tags (in case you want to be able to visually identify them on your site), as well as some filter tip instructions to your users.

After you have configured the module from the settings page, you need to add the "Object and embed" filter to the appropriate input formats (such as "Filtered HTML") on the input formats administration page (admin/filters). Configure your HTML filter to accept <object>, <embed> and <script> tags by adding them to the list of accepted tags. Configure the order of the filters so that the "Object and embed tag" filter comes directly after the "HTML" filter. After this you should be ready to go!

Note about using this with WYSIWYG editors

You cannot copy and paste embed HTML directly into the rich text fields created by WYSIWYG editors. You need to either temporarily turn rich text off before pasting the code or turn WYSIWYG off for the textareas where you want to use this.

New Maintainer

This module has a new maintainer who is updating the code to D6. Since D7 is almost out, the D5 version will not be updated or maintained. The D5 code has been untouched and unmaintained for the last two years, so that should be no surprise to anyone.

The D6 version of this module has been sponsored by Buzzr.

Project information

Releases