Tiny Tiny RSS: Community

Youtube iframe being sanitized from API

#1

Describe the problem you’re having:

Subscribe to feeds with YouTube iframe embedded, such as: rsshub.app/youtube/playlist/PLubVgegS36EMhMb1j0NZL7Fcwy5jioEcg.rss

Which is displayed correctly in browser with all iframe player loaded.

However, on RSS readers such as tiny Reader RSS, Reeder 4 (both mac/ios), those iframes seem to be sanitized.

API request captured using tiny Reader RSS:

In content the iframe was removed.

<iframe id="ytplayer" type="text/html" width="640" height="360" src="https://www.youtube.com/embed/7HldRlTZj_g" frameborder="0" allowfullscreen></iframe>

My understanding is that it should be retained since youtube is whitelisted in functions.php during the sanitization.
https://git.tt-rss.org/fox/tt-rss/src/master/include/functions.php#L1512

tt-rss version (f38a89a131)

PHP 7.2.18, Debian 9.8, postgres 10.8

#2

see has_sandbox in api documentation

#3

that’s it, thanks for pointing that out!