discourse/app/views/layouts/embed.html.erb

<!DOCTYPE html>
<html<%= raw @embeddable_css_class -%>>
  <head>
    <meta charset="utf-8">

    <%= discourse_stylesheet_link_tag 'embed', theme_ids: nil %>
    <%- unless customization_disabled? %>
      <%= discourse_stylesheet_link_tag  :embedded_theme %>
    <%- end %>
    <%= preload_script 'break_string' %>

    <%- if @topic_view && @topic_view.page_title.present? %>
      <title><%= @topic_view.page_title %> - <%= SiteSetting.title %></title>
    <%- end %>

    <meta id="data-embedded" data-referer="<%= @data_referer %>">
    <%= preload_script 'embed-application' %>

    <%= yield :head %>
  </head>
  <body>
    <%= yield %>
  </body>
</html>
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2013-12-31 13:37:43 -06:00			`<!DOCTYPE html>`
Add @embeddable_css_class from embed_controller 2017-05-08 12:00:15 -05:00			`<html<%= raw @embeddable_css_class -%>>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2013-12-31 13:37:43 -06:00			`<head>`
Add page title and charset to embedded HTML 2015-09-18 15:12:41 -05:00			`<meta charset="utf-8">`

FEATURE: backend support for user-selectable components * FEATURE: backend support for user-selectable components * fix problems with previewing default theme * rename preview_key => preview_theme_id * omit default theme from child themes dropdown and try a different fix * cache & freeze stylesheets arrays 2018-08-07 23:46:34 -05:00			`<%= discourse_stylesheet_link_tag 'embed', theme_ids: nil %>`
FEATURE: Can create stylesheets for embedded comments 2015-08-06 16:18:00 -05:00			`<%- unless customization_disabled? %>`
FIX: embedding comments was broken 2017-04-13 21:44:22 -05:00			`<%= discourse_stylesheet_link_tag :embedded_theme %>`
FEATURE: Can create stylesheets for embedded comments 2015-08-06 16:18:00 -05:00			`<%- end %>`
FEATURE: try adding some preload hints for chrome 2017-04-17 10:52:43 -05:00			`<%= preload_script 'break_string' %>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2013-12-31 13:37:43 -06:00
Add page title and charset to embedded HTML 2015-09-18 15:12:41 -05:00			`<%- if @topic_view && @topic_view.page_title.present? %>`
			`<title><%= @topic_view.page_title %> - <%= SiteSetting.title %></title>`
			`<%- end %>`

FEATURE: Allow embedding to ignore HTTP REFERER New site setting: `embed_any_origin` that will send postMessages to wildcard origins `*` instead of the referer. Most of the time you won't want to do this, so the setting is default to `false`. However, there are certain situations where you want to allow embedding to send post messages when there is no HTTP REFERER. For example, if you created a native mobile app and you wanted to embed a list of Discourse topics as HTML. In the code your HTML would be a static file/string, which would not be able to send a referer. In this case, the site setting will allow the embed to work. From a security standpoint we currently only use `postMessage` to send data about the size of the HTML document and scroll position, so it should be enable if required with minimal security ramifications. 2019-09-10 11:27:07 -05:00			`<meta id="data-embedded" data-referer="<%= @data_referer %>">`
Extract inline JS on embedded comments (#6645) * use the meta refresh tag instead * extract inline JS in embedded comment 2018-11-22 09:02:58 -06:00			`<%= preload_script 'embed-application' %>`
Support for scrolling to another post in the iframe; more complicated than you'd think! 2014-01-03 13:45:22 -06:00
Extract inline JS on embedded comments (#6645) * use the meta refresh tag instead * extract inline JS in embedded comment 2018-11-22 09:02:58 -06:00			`<%= yield :head %>`
FEATURE: Embeddable Discourse comments, now with simple-rss instead of feedzirra 2013-12-31 13:37:43 -06:00			`</head>`
			`<body>`
			`<%= yield %>`
			`</body>`
FIX: Links in the iframe should all be target=_blank 2014-03-20 09:57:18 -05:00			`</html>`