WHMCS no longer allows videos to be safely embedded in the knowledge-base

[ZeroMB]

WHMCS now restricts the use of the HTML5 video tag citing security concerns. What are the safe ways to embed videos in the WHMCS knowledge base, considering that iframes are not safer than the video tag?

[WHMCS John]

Hi @ZeroMB,

The iframe method is permitted for embedding videos in KB articles: 

<p><iframe title="YouTube video player" src="https://www.youtube.com/embed/nxd8VYu8u5s?si=s1ZGwHGnL5Av_p8j" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe></p>

What code were you using previously that is now sanitised out?

[ZeroMB]

20 hours ago, WHMCS John said:

Hi @ZeroMB,

The iframe method is permitted for embedding videos in KB articles: 

<p><iframe title="YouTube video player" src="https://www.youtube.com/embed/nxd8VYu8u5s?si=s1ZGwHGnL5Av_p8j" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe></p>

What code were you using previously that is now sanitised out?

Below code is no longer working and sanitized by WHMCS.
 

<video controls="controls" ><source src="https://example.com/selfhosted.mp4" type="video/mp4" /></video>

I think iframe is more insecure than video tag. Am I right?

[WHMCS John]

Hi @ZeroMB,

 Thanks for that information. I've logged case #WHMCS-22693 with our developers in order to have this reviewed for future releases. Whilst I cannot provide an estimated time for completion for this, once we resolve cases and push features they are available at our change log, here:

https://changelog.whmcs.com/

Thanks again for taking the time to report your findings. 

[matthewfever]

Same problem here, hundreds of our guides are partially broken due to this bug.