Overview
When attempting to embed iframes in Community articles, users may encounter the error message: Sorry, we were unable to save your changes. Your post has been changed because invalid HTML was found in the message body. The invalid HTML has been removed.
This issue arises due to insufficient permissions for embedding third-party content. The Embed content hosted by third parties permission must be set to Allow Grant to enable iframe embedding, typically reserved for admins or users with elevated access.
Solution
Follow these steps to resolve the iframe embedding issue:
-
Verify User Permissions:
- Ensure the user has the "Use full HTML in posts and signatures" permission: HTML permissions and user experience
- Check if the "Embed content hosted by third parties" permission is set to "Allow Grant." - this is usually the culprit
-
Update Permissions:
- Go to Community Admin > Users > Permissions.
- Click Edit Users.
- Locate the user experiencing the issue and update their permissions to include "Allow Grant" for embedding third-party content.
-
Test Embedding:
- Have the user attempt to embed an iframe in a Community article.
- Confirm that the iframe is successfully embedded without error messages.
-
Assign Role
- As per the Best practices: roles and permissions, it is best to create a role with this specific permission
📌 This permission is typically reserved for admins or users with elevated access due to security considerations. It is recommended to review and adjust permissions carefully to maintain security compliance. (Permission descriptions).
- As per the Best practices: roles and permissions, it is best to create a role with this specific permission
Frequently Asked Questions
- Q1: How do I know if I have the correct permissions to embed iframes?
- A1: Check your user permissions in the Community Admin area. Ensure you have "Use full HTML in posts and signatures" and "Embed content hosted by third parties" set to "Allow Grant."
Q2: What should I do if I still can't embed iframes after updating permissions?- A2: Verify that the permissions have been correctly applied and that there are no additional restrictions in place. If the issue persists, contact your Community administrator for further assistance.
-
- Q3: Why are these permissions restricted?
- A3: The permissions are restricted to prevent potential security risks associated with embedding third-party content, such as cross-site scripting (XSS) attacks. They are typically reserved for trusted users with elevated access.
Ciprian Nastase
Comments