I've gone over my settings three times because I thought that this had to be something that I was doing wrong. I cannot find any issues on my end. I've never used the "critical" priority before, but if this is truly an issue, it's critical. I apologize in advance if I've missed something. I've followed the documentation as it appears on the module's project page.

Basically, the module just doesn't seem to work.

For example, after performing the setup steps below, I attempted to embed a video from Treet.tv into one of my posts using the "Filtered HTML" input format. Treet.tv is NOT in my list of approved domains in the Embed Filter settings, but the video displayed just fine in the post.

I decided to remove youtube.com from the list of approved domains. I embedded a YouTube video into a post using the "Filtered HTML" input format. It still displayed on the saved post.

These were my setup steps.

  1. Install the module.
  2. Add <object> <embed> <script> <param> tags to the "Filtered HTML" input format.
  3. Activate the "Object and embed tag filter" filter on the "Filtered HTML" input format.
  4. Rearrange the filters used by the "Filtered HTML" input format so that "Object and embed tag filter" filter is directly below the "HTML filter" filter.

Comments

drupal_acc’s picture

drupal_acc commented

I can confirm this. I just ran the same test with the following embed code:

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="480" height="294"><param name="movie" value="http://api.treet.tv/ttvplayer/release/ttvplayer-generic.swf"></param><param name="allowfullscreen" value="true"></param><param name="allowscriptaccess" value="always"></param><param name="flashvars" value="config=http%3A//api.treet.tv/ttvplayer/api%3Fop%3Dpcfg%26v%3Ddw_107_15nov10%26h%3Dhttp%3A//treet.tv/shows/designingworlds/episodes/seraph-city"></param><embed type="application/x-shockwave-flash" width="480" height="294" src="http://api.treet.tv/ttvplayer/release/ttvplayer-generic.swf" allowfullscreen="true" allowscriptaccess="always" flashvars="config=http%3A//api.treet.tv/ttvplayer/api%3Fop%3Dpcfg%26v%3Ddw_107_15nov10%26h%3Dhttp%3A//treet.tv/shows/designingworlds/episodes/seraph-city"></embed></object>

This source was not on my approved list and the module is installed correctly.

drupal_acc’s picture

drupal_acc commented

Just put a few debug statements into the code to perform a trace. It looks like the code is not being executed at all.

The following function is never called, effectively bypassing the entire filter:

function embedfilter_filter($op, $delta = 0, $format = -1, $text = '', $langcode = '', $cache_id = 0)

embedfilter.module

I'll try to track down the source.