Plugin to embed selected urls from your site elsewhere.<\/p>\n
Other embedding will be prohibited by default, with an To make this plugin especially useful you can now allow (third party) websites to embed specific urls from your site. Activate the plugin and go to Settings -> Ruigehond embed. Install the plugin on your satellite site. This has the added benefit of locking down that site as well.<\/p>\n Use the simple shortcode on that site to generate an iframe with the embedded content: Watch the form magically and safely be embedded. Other sites will continue to not be able to embed your content.<\/p>\n You can also embed using a regular iframe in html, as long as the referrer is whitelisted. This plugin adds lines (clearly marked) at the beginning of your htaccess file. This plugin needs When the htaccess is not processed, the plugin itself works directly with the request in the php processor. You can switch on the This plugin will add a Prevent your site from being embedded. Select specific urls that may be embedded from specific origins.<\/p>\n","protected":false},"author":65,"featured_media":411496,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"Ruigehond embed - \u8587\u6653\u6735\u63d2\u4ef6\u76ee\u5f55","description":"Prevent your site from being embedded. Select specific urls that may be embedded from specific origins."},"footnotes":""},"categories":[1],"tags":[57930],"class_list":["post-411495","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-x-frame-options-embed-embedding-iframe-sameorigin"],"_links":{"self":[{"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/posts\/411495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/comments?post=411495"}],"version-history":[{"count":0,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/posts\/411495\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/media\/411496"}],"wp:attachment":[{"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/media?parent=411495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/categories?post=411495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.weixiaoduo.com\/plugins\/wp-json\/wp\/v2\/tags?post=411495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}X-Frame-Options<\/code> header and, optionally, a Content Security Policy<\/code> header.
\nThis will secure your WordPress website from a number of fairly easy attacks.<\/p>\n
\nEasily reuse forms or other content from your main site on satellite sites you own, without opening up any of them to attack.<\/p>\nQuick setup<\/h4>\n
\nAdd a reference (e.g. general-contact-form<\/code>) in the title<\/em> field and save the settings.
\nAdd a slug it should serve (e.g. \/contact-clean\/<\/code>) in the embed<\/em> field.
\nAdd urls that may embed this, aka referrers, (e.g. https:\/\/my-satellite.site<\/code>) in the textarea.<\/p>\nEmbedding<\/h4>\n
\n [ruigehond-embed src=\u201dhttps:\/\/my-main.site\/ruigehond_embed\/general-contact-form\u201d]<\/p>\n
\nHowever, by using the plugin and shortcode, the height of the iframe will automatically be adjusted to fit the content.<\/p>\nUse htaccess<\/h4>\n
\nThey need not be at the beginning, but they need to be before the WordPress lines, or any other lines that corrupt the THE_REQUEST<\/code> var.<\/p>\nmod_headers<\/code>, mod_rewrite<\/code> and mod_setenvif<\/code> to be activated, but they probably already are.<\/p>\nWithout htaccess<\/h4>\n
\nThe CSP header is not supported in that case.
\nAlso, other plugins (especially caching plugins) may already have decided on a different route and this plugin might not work.<\/p>\nContent Security Policy<\/h4>\n
Content Security Policy<\/code> (or CSP<\/code>) header in this plugin, which is the most modern way to tackle these issues.
\nHowever, other plugins may interfere, so be sure to check whether the CSP header is to your liking in practice.<\/p>\nCSP<\/code> header if none is present yet.
\nBut if one is present, the frame-ancestors<\/code> directive must be present in it for this plugin to work.
\nIt will only set the frame-ancestors<\/code> directive, none of the others (to not break your site).<\/p>\n","protected":false},"excerpt":{"rendered":"