After update to Joomla! 5.1.0 Stable embedded videos stopped working

[tigerclawforce]

Hello,
today is Aprils 17 2024 and I updated my Joomla website to Joomla! 5.1.0 Stable.
After the update my blog stop showing embedded [youtube] videos (using Tinyeditor) I just get the message
"Try watching this video on www.[youtube].com, or enable JavaScript if it is disabled in your browser."

Before the update all [youtube] videos worked fine, you can see here what I mean on my developing site:
https://blogfish.duckdns.org/index.php/blog/videos

Does anyone has any idea how to fix this?

Thank you in advanced

[Per Yngve Berg]

Your Browser needs to reload JavaScript files. clear Cache.

[tigerclawforce]

Hello, I did clear the cache but still it doesn't work

[SharkyKZ]

It's not a bug, it's a new feature in 5.1 .

[tigerclawforce]

ahhahahaha

[SharkyKZ]

This is not a joke. Someone actually thought it made sense to force sandboxed iframes in TinyMCE. With no server-side validation no less. Your options are to use a different editor or a proper extension for embedding videos.

[gws]

Is this a Joomla decision or Tinymce ?

[d3bug-00]

it seems to be from joomla, since I tested the library on the TinyMCE page and it works when inserting a [youtube] video.

https://www.tiny.cloud/docs/tinymce/lat ... c-example/

to get out of the problem, once I wrote an article in tinyMCE, I went to codeMirror and inserted the video and it worked.
for now I'm looking at alternative editor like JCE.

[Peace Freak]

I've spent quite a few hours today trying to embed Rumble videos in articles...

In the end, I just turned off TinyMCE and JCE and pasted the video code directly in the page. After turning back JCE on, when I went back to the page to tweak something, the code disappeared! What a pain! If you forget there is such code in an article it'll disappear if you re-edit it!

If someone has found a workable solution, I'd really appreciate it!

[khuchkhana]

Same issue with me. It adds sandbox="" to [youtube] embed. Does anyone have a fix???

[khuchkhana]

Finally found a way to get those embeds back.

Go to file -> Joomla/plugins/editors/tinymce/src/PluginTraits/DisplayTrait.php

Change line 463, 464 code as follows

Code: Select all

                'sandbox_iframes'       => false, //was set to true
                'convert_unsafe_embeds' => false, //was set to true

Under plugin settings make sure you have removed iframe and script from Prohibited Elements.

[Peace Freak]

Finally found a way to get those embeds back.

Go to file -> Joomla/plugins/editors/tinymce/src/PluginTraits/DisplayTrait.php

Change line 463, 464 code as follows

Code: Select all

                'sandbox_iframes'       => false, //was set to true
                'convert_unsafe_embeds' => false, //was set to true

Under plugin settings make sure you have removed iframe and script from Prohibited Elements.

Thank you!

I wonder how "permanent" this fix is? With an upgrade will it have to be redone? Will an override work?

Thanks.

[Kubik-Rubik]

Your change will be overwritten in the following core update.

The security hardening fix was introduced with this PR: https://github.com/joomla/joomla-cms/pull/43176

Feel free to discuss the issue in the Joomla! Issue Tracker: https://issues.joomla.org/tracker/joomla-cms

[Kubik-Rubik]

I found a ticket where the problem is already discussed: https://issues.joomla.org/tracker/joomla-cms/43407

[khuchkhana]

Your change will be overwritten in the following core update.

The security hardening fix was introduced with this PR: https://github.com/joomla/joomla-cms/pull/43176

Feel free to discuss the issue in the Joomla! Issue Tracker: https://issues.joomla.org/tracker/joomla-cms

Shouldn't there be an option to disable or enable that??? I mean most of the time you need to embed YT, plus a number of other stuff too.

I'm new to Joomla but it does not convince me to leave WordPress at all now due to stuff like these.

[khuchkhana]

Finally found a way to get those embeds back.

Go to file -> Joomla/plugins/editors/tinymce/src/PluginTraits/DisplayTrait.php

Change line 463, 464 code as follows

Code: Select all

                'sandbox_iframes'       => false, //was set to true
                'convert_unsafe_embeds' => false, //was set to true

Under plugin settings make sure you have removed iframe and script from Prohibited Elements.

Thank you!

I wonder how "permanent" this fix is? With an upgrade will it have to be redone? Will an override work?

Thanks.

Sadly its not a permanent fix and a new update will surely wipe this out. I'm not sure how an override works as I'm new to Joomla CMS. A workaround is to install TinyMCE Configuration Modifier plugin from https://github.com/nikosdion/plg_system_tinymod as macstalker said at https://issues.joomla.org/tracker/joomla-cms/43407 and then add the following

{
"sandbox_iframes": false
}


But personally I have not tested it yet.