I just posted embedded videos at http://highdesertfood.org/forum/our-plants/rosemary/
When I went to edit it I got the 403. When I first posted I initially got an error from Wordfence, but on second try it went through (added an exception, I think).
Then I turned off all plugins except Akismet and SP, but no go, 403 every time now. I suspect it has to do with the iframe since I can edit other posts.
Used Firefox and also tried it in Chrome, no go.
This is weird here too. I included the iframe code for the video when I first posted above and it displayed the code. Then I edited the above post, it showed the video in preview, but then stripped the code.
I edited to add the code again and again it displayed the code, go to edit (made no changes), saved and the code disappears.
<iframe src=”https://www.youtube.com/embed/l-Zo9I3C3_I” width=”560″ height=”315″ frameborder=”0″></iframe></p>
Were you posting as an admin or a site user? If an admin then you will be allowed to use an iFrame but if a user then SP will strip it out unless permission has been granted for you to use it. iFrames are really dangerous to allow users to create as they can do just about anything in an iframe including running db and scripts.
If you want to embed a youtube video in an SP post you use the url NOT the html. WordPress will convert that via the oEmbed protocols at runtime making it safe from attack.
I was posting as admin and it’s just so strange that it stripped the iframe code only when editing. Here too.
But I’ll just use the link for the videos, thanks!
It is the best and recommended way. It is precisely because of the iFrame danger that WP invested so much effort into supporting the oEmbed protocol.