Developing New Widget - Ask for Embed Code encodes special characters so codes will not work

  • Profile Image
    jotform_on2air
    Asked on August 14, 2019 at 02:34 PM

    Hi, the 'Ask For Embed Code' Type of Widget does not appear to work.


    See video explaining issue:

    https://www.screencast.com/t/lFaqB498

  • Profile Image
    Richie_P
    Answered on August 14, 2019 at 04:01 PM

    Can you please share to us how would you like your widget to work?

    I recommend to please submit an email to api@jotform.com. The development team will gladly provide you guidance and assistance regarding creating your widget.


  • Profile Image
    jotform_on2air
    Answered on August 14, 2019 at 04:08 PM

    I should be able to insert the embed code for a youtube video, for example, and it would display the video, instead of the text it does.


    Every time I email the dev team I get no response :(

  • Profile Image
    EltonCris
    Answered on August 14, 2019 at 05:53 PM

    You're absolutely right, it also doesn't work for me. It encodes special characters into its equivalent entities so that might be the reason why.

    https://form.jotform.com/92256346964972

    I have now raised this to our developers. We will inform you here once we have an update.

    For now, you may consider using iframe embed and youtube widget if your intention is to embed a youtube video.

  • Profile Image
    jotform_on2air
    Answered on August 14, 2019 at 06:49 PM

    right; the question is why would it encode the special characters.  Seems like a major bug.

    thanks for escalating.



  • Profile Image
    EltonCris
    Answered on August 14, 2019 at 08:12 PM

    That's probably implemented for security purposes because personally, XSS and CSRF attack can be performed when special characters aren't escaped. But, you're right, it is still considered a bug so our developers may further add their input if they are into this and hopefully will be able to find a solution or an alternative.

    Thanks