Which HTTP headers to use for subdomain embedding?

I was able to figure out that because Lightsail uses a Bitnami deployment of WordPress, Bitnami overrides the .htaccess file. Instead you have to update the /opt/bitnami/apache2/conf/httpd.conf file by adding the following content: <IfModule headers_module> <IfVersion >= 2.4.7 > Header always setifempty X-Frame-Options ALLOW-FROM https://*.example.com </IfVersion> <IfVersion < 2.4.7 > Header always merge X-Frame-Options ALLOW-FROM … Read more

How to ensure the visual editor doesn’t ruin my iframe?

add_shortcode(‘custom_iframe_shortcode’, ‘build_iframe’); function build_iframe($atts) { $defaults = array( ‘source’ => ‘https://example.com/calc.php?tp=dif&cl=beleggen&h=1&wf=19370&country=NL’, ‘script_source’ => ‘//example.com/iframeResizeMe.min.js.gz’ ); $args = shortcode_atts($defaults, $atts); ob_start(); ?> <iframe onload=”fa_iframeresize.do(this);” src=”https://wordpress.stackexchange.com/questions/314518/<?php echo $args[“source’]; ?>” scrolling=”no” width=”100%” style=”padding:0px;margin:0px;border-width:0px;” frameborder=”0″> </iframe> <script type=”text/javascript” src=”https://wordpress.stackexchange.com/questions/314518/<?php echo $args[“script_source’]; ?>”></script> <?php return ob_get_clean(); } then call this like [build_iframe] or [build_iframe source=”https://blah” script_source=”https://blah/blah.js’]

How do i disable/disallow and tags in TinyMCE?

Simple way, do not add content when logged in as admin user but only as author. If you want to go to somewhat extreme, remove the posting capabilities from the admin. Not sure where that will leave you with editing slugs so a proper check of permission will be needed. This answers your question as … Read more

Allow all attributes in $allowedposttags tags

I’m pretty sure you have to explicitly name all allowed attributes – just use: $allowedposttags[‘iframe’] = array ( ‘align’ => true, ‘frameborder’ => true, ‘height’ => true, ‘width’ => true, ‘sandbox’ => true, ‘seamless’ => true, ‘scrolling’ => true, ‘srcdoc’ => true, ‘src’ => true, ‘class’ => true, ‘id’ => true, ‘style’ => true, ‘border’ … Read more

Easy way to inject js in tinymce iframe?

WordPress injects its own external script files in the TinyMCE editor iframe, see for example the wp-includes/js/tinymce/plugins/wpembed/plugin.js file: (function ( tinymce ) { ‘use strict’; tinymce.PluginManager.add( ‘wpembed’, function ( editor, url ) { editor.on( ‘init’, function () { var scriptId = editor.dom.uniqueId(); var scriptElm = editor.dom.create( ‘script’, { id: scriptId, type: ‘text/javascript’, src: url + … Read more

Embed WordPress Admin in an iframe

By default WordPress doesn’t allow to embed the admin pages into a frame. From wp-includes/default-filters.php: add_action( ‘admin_init’, ‘send_frame_options_header’, 10, 0 ); To enable embedding, remove the action in a plugin: remove_action( ‘admin_init’, ‘send_frame_options_header’ ); Be aware of the security implications. I wouldn’t do that.

WordPress wp_nav_menu within iFrame

To get a working nav menu WordPress needs to be set up complete. My suggestion is to use add_feed(). Ignore the name, you get text/html as output. Let’s start with code <?php # -*- coding: utf-8 -*- /* Plugin Name: T5 Iframe Nav Menu Description: Display a nav menu in an iframe. Version: 2012.05.18 Refresh … Read more