use iframe for oembed - untrusted content

2011-10-24 20:10:46 -07:00
parent 790c4a4e1a
commit 1a7badb405
2 changed files with 23 additions and 3 deletions
--- a/include/bbcode.php
+++ b/include/bbcode.php
@@ -19,8 +19,7 @@ function tryoembed($match){
 	if ($o->type=="error") return $match[0];
 	
 	$html = oembed_format_object($o);
-	
-	return $html;
+	return oembed_iframe($html,$o->width,$o->height);
 	
 }