Conversation

Notices

1. Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 01:59:16 JST Colin Devroe

   • Eugen Rochko

   @Gargron Did Mastodon.social deprecate its oEmbed support and I missed it? Or, is there a new endpoint?

   • Matthias Pfefferle (pfefferle@mastodon.social)'s status on Wednesday, 18-Sep-2024 01:59:16 JST Matthias Pfefferle

     in reply to

     • Eugen Rochko

     @cdevroe @Gargron it still works, you can check the HTML code of a post and search for a link element with `type='application/json+oembed'`

   • Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 01:59:16 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @pfefferle @Gargron Thanks for the tip! I will look into this. My "favorite toots" list seems to be broken for .social and .online but only just recently: https://cdevroe.com/favorite-toots/

   • Eugen Rochko (gargron@mastodon.social)'s status on Wednesday, 18-Sep-2024 01:59:16 JST Eugen Rochko

     in reply to

     • Matthias Pfefferle

     @cdevroe @pfefferle It seems like your website content security policy blocks the embed.js script from loading.

   • Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 02:50:54 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @Gargron @pfefferle oh good catch! Perhaps that was updated at some point in the recent past. Because it worked before. Thank you!

   • Colin Devroe (cdevroe@mastodon.social)'s status on Thursday, 05-Dec-2024 05:24:39 JST Colin Devroe

     in reply to

     • Eugen Rochko

     @Gargron I'm finally getting a chance to fix the content security policy on my site. What would you recommend I set it to so that embeds from most instances would work?

   • Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 11-Dec-2024 22:10:00 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @Gargron @pfefferle Is there any documentation on what the CSPs should be? I'm allowing iframes from this instance (and, as far as I can tell, the iframe is what loads the embed JS?)?