iframe

• Advanced iFrame Pro
• iframe
• Donate
• GitHub

[iframe src="http://www.youtube.com/embed/dUpTjDqjQoo" width="100%" height="500"] shortcode should show something like this: [youtube http://www.youtube.com/watch?v=dUpTjDqjQoo] WordPress removes iframe html tags because of security reasons. Iframe shortcode is the replacement of the iframe html tag and accepts the same params as iframe html tag does. You may use iframe shortcode to embed content from YouTube, Vimeo, Google Maps or from any external page. If you need to embed content from YouTube, Vimeo, SlideShare, SoundCloud, Twitter via direct link, you may use [embed]http://www.youtube.com/watch?v=dUpTjDqjQoo[/embed] shortcode. [embed] shortcode is a core WordPress feature and can embed content from many resources via direct link. Important: You can not embed HTTP pages into HTTPS pages and vice versa. So the protocol (http or httpS) for parent and embedded page should match. iframe params:

• src - source of the iframe: [iframe src="http://www.youtube.com/embed/dUpTjDqjQoo"]; by default src="http://www.youtube.com/embed/dUpTjDqjQoo";
• width - width in pixels or in percents: [iframe width="100%"] or [iframe width="600"]; by default width="100%";
• height - height in pixels: [iframe height="500"]; by default height="500";
• scrolling - with or without the scrollbar: [iframe scrolling="no"]; by default scrolling="yes";
• frameborder - with or without the frame border: [iframe frameborder="0"]; by default frameborder="0";
• marginheight - height of the margin: [iframe marginheight="0"]; removed by default;
• marginwidth - width of the margin: [iframe marginwidth="0"]; removed by default;
• allowtransparency - allows to set transparency of the iframe: [iframe allowtransparency="true"]; removed by default;
• id - allows to add the id of the iframe: [iframe id="custom_id"]; removed by default;
• class - allows to add the class of the iframe: [iframe class="custom_class"]; by default class="iframe-class";
• style - allows to add the css styles of the iframe: [iframe style="margin-left:-30px;"]; removed by default;
• same_height_as - allows to set the height of iframe same as target element: [iframe same_height_as="div.sidebar"], [iframe same_height_as="div#content"], [iframe same_height_as="body"], [iframe same_height_as="html"]; removed by default;
• any_other_param - allows to add new parameter of the iframe [iframe any_other_param="any_value"];
• any_other_empty_param - allows to add new empty parameter of the iframe (like "allowfullscreen" on youtube) [iframe any_other_empty_param=""];

5.1

• removed srcdoc attribute completely

5.0

• fixed the $atts string/array error.

4.9

• sanitized srcdoc attribute more.

4.8

• sanitized srcdoc attribute.

4.7

• remove all attributes starting with "on". Examples: onload, onmouseover, onfocus, onpageshow, onclick.

4.6

• removed onmouseover and onfocus attributes.

4.5

• sanitize URL.

4.4

• minor cleanup.

4.3

• minor refactoring.

4.2

• minor bugfixing.

4.1

• removed onpageshow and onclick params. Reason: XSS vulnerability (thanks to dxw.com).

4.0

• removed get_params_from_url param. Reason: XSS vulnerability (thanks to dxw.com). If you still need this feature you can [download iframe ver 3.0[(https://wordpress.org/plugins/iframe/developers/) and stick to it but keep in mind of XSS vulnerability.
• removed onload param. Reason: XSS vulnerability (thanks to dxw.com).
• escaping attributes

3.0

• removed same_height_as="content", same_height_as="window", same_height_as="document" features because it was not working properly
• rewrote the javascript-code using pure JavaScript and without jQuery - no need to load jQuery for every site using iframe plugin
• removed function_exists check because each function has unique prefix
• code refactored
• update docs
• set height="500" instead of 480 by default
• set scrolling="yes" instead of "no" by default

2.9

• remove '&' from the end of the string in 'get_params_from_url' param

2.8

• remove fix for google maps

2.7

• minor changes

2.6

• minor changes

2.5

• added 'get_params_from_url' (thanks to Nathanael Majoros)

2.4

• minor changes

2.3

• small fixes
• added (src="http://www.youtube.com/embed/4qsGTXLnmKs") by default

2.2

• fixed bug (Notice: Undefined index: same_height_as)

2.1

• added (frameborder="0") by default

2.0

• plugin core rebuild (thanks to Gregg Tavares)
• remove not setted params except the defaults
• added support for all params, which user will set
• added support for empty params (like "allowfullscreen" on youtube)

1.8

• Added style parameter

1.7

• Fixing minor bugs

1.6.0

• Added auto-height feature (thanks to Willem Veelenturf)

1.5.0

• Using native jQuery from include directory
• Improved "same_height_as" parameter

1.4.0

• Added "same_height_as" parameter

1.3.0

• Added "id" and "class" parameters

1.2.0

• Added "output=embed" fix to Google Map

1.1.0

• Parameter allowtransparency added (thanks to Kent)

1.0.0

• Initial release