wf firewall blocking iframe/youtube

  • I tried to embed a youtube iframe in a page but the wordfence firewall stripped it; I had to disable the firewall for it to work.

    Cant find any info googling or in the doco on what switch I need to flick to allow embeds and have the firewall turned on

Viewing 6 replies - 1 through 6 (of 6 total)

  • Hi @jklaneway
    Did you try switching the firewall into “Learning Mode” and re-check this issue?

    Also, it would be helpful if you can share more details about how you are embedding the YouTube video into your page, are you using any specific page builder?

    Thanks.

    I have the same bug. Wordfence strips the iframe code even though it has whitelisted the URL: ‘Whitelisted by via false positive dialog.

    • This reply was modified 6 years, 7 months ago by S?ren Sohl.

    Hi @ssohl
    Could you share the iframe code you are trying to use? also let me know where exactly you are trying to add this code so I can reproduce this issue.

    Thanks.

    Thread Starter jklaneway

    (@jklaneway)

    yes the firewall was in learning mode when we tried putting the code in

    here’s what we tried putting in

    <iframe width="560" height="315" src="https://www.youtube.com/embed/<theyoutubevidcode>?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>

    • This reply was modified 6 years, 7 months ago by jklaneway.

    @jklaneway are you using a specific page builder or that’s the default WordPress editor?

    Check the “Live Traffic” log for any related blocked entry by the firewall there, try to whitelist such request and recheck this issue.

    Thanks.

    My issue is similar to @jklaneway, or at least my embed code is in relation to the rel and showinfo parameters.

    I’m a member of the Editorial Freelancers Assn. Its website developers use Woocommerce and WordFence plugins on the WordPress site. I’m wanting to embed a YouTube video on my profile page.

    The developers recently went with an updated version of WordFence, which doesn’t permit <iframe> embedding. Instead the developers are forcing me to use this code version: [embed]https://www.youtube.com/watch?v=<myvideo>[/embed]

    Inserting &rel=0 immediately following the <myvideo> video ID string and before the [/embed] tag doesn’t do anything.

    Any idea how to get the parameter to be effective? Thanks!

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘wf firewall blocking iframe/youtube’ is closed to new replies.