Add CVE references for CVE-2016-9646, CVE-2016-9645

[git.ikiwiki.info.git] / doc / tips / embedding_content.mdwn

diff --git a/doc/tips/embedding_content.mdwn b/doc/tips/embedding_content.mdwn
index 666f4dab36c08b2c2c7f8778b0597c04073d3b47..96bc0653fa62e8a0f440ffa6895201636d4a73df 100644 (file)
--- a/doc/tips/embedding_content.mdwn
+++ b/doc/tips/embedding_content.mdwn
@@ -1,3 +1,5 @@
+[[!meta date="2008-12-26 15:27:49 -0500"]]
+
 Content from sites such as YouTube can be embedded into a web page. Maybe
 you want to do this. But you'll find that the [[plugins/htmlscrubber]]
 doesn't let you. It blocks the tags used to embed such content, because
@@ -5,9 +7,9 @@ they can be abused in many evil ways.
 
 Some plugins have been written to try to work around this problem, by
 whitelisting the html needed to embed things from a few sites like Google
-calendar, videos, and YouTube. The problem with these plugins is that they
-have to be kept up to date to add new sites, and follow changes to the html
-such sites use for embedding.
+maps, calendar, videos, and YouTube. The problem with these plugins is that
+they have to be kept up to date to add new sites, and follow changes to the
+html such sites use for embedding.
 
 (Digression: The real problem with the plugins is that they hide the
 underlying trust relationship. If you decide to embed html from a site,
@@ -15,7 +17,7 @@ you'd better trust that site. And if ikiwiki lets you enter such html, it
 needs to trust you.)
 
 The [[plugins/htmlscrubber]] offers a different way around this problem.
-You can configure it to skip scrubbing certian pages, so that content from
+You can configure it to skip scrubbing certain pages, so that content from
 elsewhere can be embedded on those pages. Then use [[plugins/lockedit]]
 to limit who can edit those unscrubbed pages.