Is This Safe To Do ?

[pwired]

Hi,

An easy way to embed youtube video clips is

in TinyMCE or CKEditor, go to source and then

put  there an iframe like this:

<iframe width="220" height="157" src="//www.youtube.com/embed/vLDJLVM4eOA" frameborder="0" allowfullscreen></iframe>

It works but my questions is, is this safe to do or is this opening doors to bad guys

injecting code ?

[teppo]

If you're asking if embedding YouTube videos in an iframe is safe, yes.

If you're asking if embedding iframes is safe in general, yes and no -- content within iframe doesn't have access to your site, so in that way you're safe, but malicious content within an iframe can harm visitors of your site, so naturally you'll have to be picky about what you embed.

An even easier way for embedding videos from YouTube or Vimeo is the Video embed for YouTube/Vimeo textformatter.

[Joss]

An easier way is to use the video text formatter, I would have thought. 

http://modules.processwire.com/modules/textformatter-video-embed/

Edit: he beat me!