Is it possible to embed HTML or svg tags into the document? #1652
Replies: 9 comments 16 replies
-
|
Hi, it is not possible due to the inherent security risks of allowing arbitrary user generated html. What, specifically, are you hoping to embed? |
Beta Was this translation helpful? Give feedback.
-
|
@tommoor Thanks for your prompt reply! Basically, I'm trying to put a svg tag due to the fact that my team can easily continue editing on draw.io (as the source is in the tag itself) as well as zoom in as much as they can as the diagrams sometimes are huge and contains lots of text. For example, the following svg image has been created on draw.io. Any advice on alternatives is also appreciated. Loop pagination until load all products Loop pagination until load all products |
Beta Was this translation helpful? Give feedback.
-
|
Attaching screenshot as github doesn't render the actual svg tag. |
Beta Was this translation helpful? Give feedback.
-
|
I think ideally we'd support embedding draw.io as a service, rather than SVG tags – this has been requested before, the way it would be achieved is through an iframe so it comes down to whether they allow iframing or embedding. |
Beta Was this translation helpful? Give feedback.
-
|
Notion supports arbitrary HTML embeds. Outline should too! 👍 |
Beta Was this translation helpful? Give feedback.
-
|
I'm currently recommending we don't use Outline and use Notion instead because of this missing feature in Outline. Security issues can be worked around (ignoring all scripts etc). Or worst case, this could be enabled with a per workspace flag. |
Beta Was this translation helpful? Give feedback.
-
|
we also need support html tag, as markdown use it for alignment |
Beta Was this translation helpful? Give feedback.
-
|
html tags would be nice, because markdown can't everything. |
Beta Was this translation helpful? Give feedback.
-
|
Provides the ability to insert html for users with professional capabilities, which may be a shortcut for adding rich text representations. In my case, I want the ⌘ |
Beta Was this translation helpful? Give feedback.
-
|
I would like to use it to extend outline. And custom HTML would allow that, yes it would be possible security risks. But one option could be an opt-in setting, that the admin have to specify. Embeds and/or iframes would be a good start. |
Beta Was this translation helpful? Give feedback.
-
|
@tommoor It's one of the primary ways to extend a tool's native feature-set, instead, it seems the focus here is primarily on pre-defined (static) plugins, which effectively gatekeeps and severely constrains the whole ecosystem of this "open source" tool. |
Beta Was this translation helpful? Give feedback.
-
|
Why? The world does it, safely. (One popular way being, using iframes with oembed) Also, the onus of the risk is on the self-hoster/account owner, after all. |
Beta Was this translation helpful? Give feedback.
-
|
What kind of thing are you looking to achieve? Better to focus on the problem rather than a solution |
Beta Was this translation helpful? Give feedback.
-
Rather weird approach.
|
Beta Was this translation helpful? Give feedback.
-
|
Gotcha, it sounds more like you're after a website generator in some ways. Outline is quite opinionated software, think of it more like Google Docs than something like Webflow/Frontpage in terms of the functionality and experience we're looking to provide, as it's also primarily developed as a cloud-hosted product that does come with security restrictions too. |
Beta Was this translation helpful? Give feedback.
-
|
And strictly restricting the integration/extending capabilities to only a select few tools/platforms (on the basis of the opinions of the maintainers), conforms the software with "Open-Source Wiki software" standards? There's still a world of difference between being a highly restrictive wiki/knowledgebase software and a website generator. |
Beta Was this translation helpful? Give feedback.
-
I'd suggest you google "cross site scripting vulnerability" before saying 'the world does it safely'. iframes are functionally sandboxed away from the main application and can't be manipulated within the application itself. |
Beta Was this translation helpful? Give feedback.
-
Seems like your 'google search' stopped short of actually trying to find solutions. |
Beta Was this translation helpful? Give feedback.
-
|
My 2c: If Notion does it safely, Outline can do it. They have chosen not to. Which is up to them. But we certainly won't be using Outline as a result. |
Beta Was this translation helpful? Give feedback.
-
|
Could you point to the functionality in Notion? I wonder if I'm misunderstanding the request |
Beta Was this translation helpful? Give feedback.
-
Its hard to find the feature listed in the Notion docs. I think I found it by mistake. This looks to be an example: https://nickjanes.notion.site/How-to-Create-Custom-Widgets-and-Embed-in-Notion-de75fba83e954a1480281ab5dfed55eb. Probably best to see for yourself, just create a free Notion account, press the plus on a page in there and choose 'embed' then paste any site's URL and the Notion server will get the HTML from the URL then create a block in your Notion page with the HTML from the URL. We are going to use it for windows of data showing live site info (release version, date etc). |
Beta Was this translation helpful? Give feedback.
-
|
Yea, we'll support this (It's just blocked by #3000 currently) – it's different to writing arbitrary HTML and JavaScript into the page though which was the original request on this issue. |
Beta Was this translation helpful? Give feedback.
-
|
My bad, sorry. Looking forward to it. |
Beta Was this translation helpful? Give feedback.
-
Hi! I'd would to ask if it's possible to embed HTML tag or svg tag into the document.
In the "/" menu, I don't see any menu item like "HTML code". Simply put the html tag as text also just render as simple text as shown in the image below.
If it's not currently support, is there any workaround?
Thanks!
Beta Was this translation helpful? Give feedback.
All reactions