[Rails] Safely Allow Embedded Media on User Pages

Andrew Kortina
Wed, 16 Aug 2006 19:59:19 -0000

Hi,

I''m working on allowing users of my website to embed media from places
like YouTube, Flickr, Google Video, Slide.com, etc. into their home
pages, but I wanted to know if anyone had suggestions or links to good
articles about how to make sure the embedded content is cleaned / safe.

One thing that came to mind was to regular expression check against each
type of embedded media. Seems like this would probably be the safest
route,  but that would be quite tedious to do for every possible source.

Please let me know if you have any ideas, snippets, suggestions, or
links.  Thanks.

--kortina