Block rule for the Wikidot iframe block: [[iframe URL attributes]].
The [[iframe]] tag is a self-closing block that embeds an external
page in an <iframe>. The first argument after the block name is the
URL, followed by optional attributes.
Security measures:
Only http:// and https:// URLs are accepted.
javascript:, data:, and vbscript: schemes are rejected.
URL normalisation strips whitespace and control characters to prevent
evasion via character insertion.
Only a specific set of HTML attributes is allowed (Wikidot filters
out class and id).
Block rule for the Wikidot iframe block:
[[iframe URL attributes]].The
[[iframe]]tag is a self-closing block that embeds an external page in an<iframe>. The first argument after the block name is the URL, followed by optional attributes.Security measures:
http://andhttps://URLs are accepted.javascript:,data:, andvbscript:schemes are rejected.classandid).Allowed attributes:
width,height,style,scrolling,frameborder.