ACF Disabled Spotify Player Embed on 120 Websites

For anyone affected by this sudden change where iframe output is blocked by ACF, and since support here can take some time, make sure to:

1.) NOT install ACF version 6.2.5
2.) If you did install this version and your ACF project doesn’t work any longer (eg Iframe HTML output being blocked by ACF) then roll back to version 6.2.3

To roll back ACF to previous versions, follow this video https://youtu.be/3lS9A-UeUic

It worked for me. It’s all working again after I rolled back.

Theo also has a working solution in this tread “Missing field with last update” whereby you can disable the new changes for a given field (it also worked for me) by using a Functions.php filter.

• This reply was modified 10 months, 1 week ago by avviano.
• This reply was modified 10 months, 1 week ago by avviano.

Hi there,

Sorry to hear about how this change affected your sites.
There is a blog post that was published with more detials on this change and other similar changes coming to the_field and the_sub_field methods – https://www.advancedcustomfields.com/blog/acf-6-2-5-security-release/

A fix that is suggested is to specify the tags you do not want striped \ escaped from the field value’s output using the method shown here https://www.advancedcustomfields.com/resources/html-escaping/#customization

Hope this clears things up but if you need further assistance on this you can open a ticket with us from here https://www.advancedcustomfields.com/wp-content/uploads/2024/01/notice-screenshots.png

Regards,

Thank you!

I will give the exception in function.php to allow iframes a try.

Hi there,

Sure thing! In case you need further clarification, please create a ticket using our ?support form and we can look into it further.