Conversation

Notices

1. Embed this notice
   Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 00:05:04 JST Colin Devroe

   • Eugen Rochko

   @Gargron Did Mastodon.social deprecate its oEmbed support and I missed it? Or, is there a new endpoint?

   • Embed this notice
     Matthias Pfefferle (pfefferle@mastodon.social)'s status on Wednesday, 18-Sep-2024 00:05:03 JST Matthias Pfefferle

     in reply to

     • Eugen Rochko

     @cdevroe @Gargron it still works, you can check the HTML code of a post and search for a link element with `type='application/json+oembed'`

   • Embed this notice
     Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 00:07:03 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @pfefferle @Gargron Thanks for the tip! I will look into this. My "favorite toots" list seems to be broken for .social and .online but only just recently: https://cdevroe.com/favorite-toots/

   • Embed this notice
     Eugen Rochko (gargron@mastodon.social)'s status on Wednesday, 18-Sep-2024 01:59:16 JST Eugen Rochko

     in reply to

     • かき@GNUsocialJP
     • Matthias Pfefferle

     @cdevroe @pfefferle It seems like your website content security policy blocks the embed.js script from loading.

   • Embed this notice
     Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 18-Sep-2024 02:50:53 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @Gargron @pfefferle oh good catch! Perhaps that was updated at some point in the recent past. Because it worked before. Thank you!

   • Embed this notice
     Colin Devroe (cdevroe@mastodon.social)'s status on Thursday, 05-Dec-2024 05:24:35 JST Colin Devroe

     in reply to

     • Eugen Rochko

     @Gargron I'm finally getting a chance to fix the content security policy on my site. What would you recommend I set it to so that embeds from most instances would work?

   • Embed this notice
     Colin Devroe (cdevroe@mastodon.social)'s status on Wednesday, 11-Dec-2024 22:09:55 JST Colin Devroe

     in reply to

     • Eugen Rochko
     • Matthias Pfefferle

     @Gargron @pfefferle Is there any documentation on what the CSPs should be? I'm allowing iframes from this instance (and, as far as I can tell, the iframe is what loads the embed JS?)?