CINXE.COM
Embed the OD forum in the ATLAS Open Data website - Site Feedback - CERN Open Data
<!DOCTYPE html> <html lang="en-GB"> <head> <meta charset="utf-8"> <title>Embed the OD forum in the ATLAS Open Data website - Site Feedback - CERN Open Data</title> <meta name="description" content="Dear devs, Within ATLAS Open Data we would like to link users directly to this forum to submit their questions. To do so, we’d like to embed https://opendata-forum.cern.ch/ within our website: https://opendata.atlas.ce&hellip;"> <meta name="generator" content="Discourse 3.4.0.beta3-dev - https://github.com/discourse/discourse version 4d1e66418cdb08028ab3d616ba90b8d003783cae"> <link rel="icon" type="image/png" href="https://opendata-forum.cern.ch/uploads/default/optimized/1X/57e3de94eac9dab73deda7d0e32a282479983b72_2_32x32.png"> <link rel="apple-touch-icon" type="image/png" href="https://opendata-forum.cern.ch/uploads/default/optimized/1X/57e3de94eac9dab73deda7d0e32a282479983b72_2_180x180.png"> <meta name="theme-color" media="all" content="#86bddb"> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, user-scalable=yes, viewport-fit=cover"> <link rel="canonical" href="https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350" /> <link rel="search" type="application/opensearchdescription+xml" href="https://opendata-forum.cern.ch/opensearch.xml" title="CERN Open Data Search"> <link href="/stylesheets/color_definitions_shades-of-blue_2_3_a43bc7b0cad60cf53b767f2fb726ef351d74ccea.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" class="light-scheme"/> <link href="/stylesheets/desktop_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="desktop" /> <link href="/stylesheets/checklist_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="checklist" /> <link href="/stylesheets/discourse-details_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-details" /> <link href="/stylesheets/discourse-lazy-videos_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-lazy-videos" /> <link href="/stylesheets/discourse-local-dates_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-local-dates" /> <link href="/stylesheets/discourse-narrative-bot_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-narrative-bot" /> <link href="/stylesheets/discourse-presence_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-presence" /> <link href="/stylesheets/discourse-solved_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-solved" /> <link href="/stylesheets/discourse-templates_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-templates" /> <link href="/stylesheets/discourse-voting_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-voting" /> <link href="/stylesheets/footnote_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="footnote" /> <link href="/stylesheets/poll_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="poll" /> <link href="/stylesheets/spoiler-alert_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="spoiler-alert" /> <link href="/stylesheets/discourse-voting_desktop_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="discourse-voting_desktop" /> <link href="/stylesheets/poll_desktop_2813ddca04d9eddaa9c955ef760383e5000aebad.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="poll_desktop" /> <link href="/stylesheets/desktop_theme_3_3efa348726a486787a6db98ef7ed0a6b8664ad0d.css?__ws=opendata-forum.cern.ch" media="all" rel="stylesheet" data-target="desktop_theme" data-theme-id="3" data-theme-name="shades of blue"/> <link rel="alternate nofollow" type="application/rss+xml" title="RSS feed of 'Embed the OD forum in the ATLAS Open Data website'" href="https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350.rss" /> <meta property="og:site_name" content="CERN Open Data" /> <meta property="og:type" content="website" /> <meta name="twitter:card" content="summary" /> <meta name="twitter:image" content="https://opendata-forum.cern.ch/uploads/default/original/1X/8111d5867079d25664b101d6914a20401ad77de6.png" /> <meta property="og:image" content="https://opendata-forum.cern.ch/uploads/default/original/1X/8111d5867079d25664b101d6914a20401ad77de6.png" /> <meta property="og:url" content="https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350" /> <meta name="twitter:url" content="https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350" /> <meta property="og:title" content="Embed the OD forum in the ATLAS Open Data website" /> <meta name="twitter:title" content="Embed the OD forum in the ATLAS Open Data website" /> <meta property="og:description" content="Dear devs, Within ATLAS Open Data we would like to link users directly to this forum to submit their questions. To do so, we’d like to embed https://opendata-forum.cern.ch/ within our website: https://opendata.atlas.cern/ If we try to setup the most basic configuration, like: <iframe src="https://opendata-forum.cern.ch/new-topic?title=topic%20title&category=atlas" style={{ width: '100%', height: '500px', border: 'none' }}></iframe> We see the following message in the rendered frame: I h..." /> <meta name="twitter:description" content="Dear devs, Within ATLAS Open Data we would like to link users directly to this forum to submit their questions. To do so, we’d like to embed https://opendata-forum.cern.ch/ within our website: https://opendata.atlas.cern/ If we try to setup the most basic configuration, like: <iframe src="https://opendata-forum.cern.ch/new-topic?title=topic%20title&category=atlas" style={{ width: '100%', height: '500px', border: 'none' }}></iframe> We see the following message in the rendered frame: I h..." /> <meta property="og:article:section" content="Site Feedback" /> <meta property="og:article:section:color" content="808281" /> <meta property="article:published_time" content="2024-08-28T14:29:12+00:00" /> <meta property="og:ignore_canonical" content="true" /> </head> <body class="crawler browser-update"> <header> <a href="/"> CERN Open Data </a> </header> <div id="main-outlet" class="wrap" role="main"> <div id="topic-title"> <h1> <a href="/t/embed-the-od-forum-in-the-atlas-open-data-website/350">Embed the OD forum in the ATLAS Open Data website</a> </h1> <div class="topic-category" itemscope itemtype="http://schema.org/BreadcrumbList"> <span itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem"> <a href="/c/site-feedback/2" class="badge-wrapper bullet" itemprop="item"> <span class='badge-category-bg' style='background-color: #808281'></span> <span class='badge-category clear-badge'> <span class='category-name' itemprop='name'>Site Feedback</span> </span> </a> <meta itemprop="position" content="1" /> </span> </div> </div> <div itemscope itemtype='http://schema.org/DiscussionForumPosting'> <meta itemprop='headline' content='Embed the OD forum in the ATLAS Open Data website'> <link itemprop='url' href='https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350'> <meta itemprop='datePublished' content='2024-08-28T14:29:12Z'> <meta itemprop='articleSection' content='Site Feedback'> <meta itemprop='keywords' content=''> <div itemprop='publisher' itemscope itemtype="http://schema.org/Organization"> <meta itemprop='name' content='CERN'> <div itemprop='logo' itemscope itemtype="http://schema.org/ImageObject"> <meta itemprop='url' content='https://opendata-forum.cern.ch/uploads/default/original/1X/251aad5a77d2cc762d2ef4fdc9b281af5e89a0ae.png'> </div> </div> <div id='post_1' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/gguerrie'><span itemprop='name'>gguerrie</span></a> </span> <link itemprop="mainEntityOfPage" href="https://opendata-forum.cern.ch/t/embed-the-od-forum-in-the-atlas-open-data-website/350"> <link itemprop="image" href="https://opendata-forum.cern.ch/uploads/default/original/1X/8111d5867079d25664b101d6914a20401ad77de6.png"> <span class="crawler-post-infos"> <time datetime='2024-08-28T14:29:12Z' class='post-time'> 28 August 2024 14:29 </time> <meta itemprop='dateModified' content='2024-08-28T14:29:12Z'> <span itemprop='position'>1</span> </span> </div> <div class='post' itemprop='text'> <p>Dear devs,<br> Within ATLAS Open Data we would like to link users directly to this forum to submit their questions.<br> To do so, we’d like to embed <a href="https://opendata-forum.cern.ch/">https://opendata-forum.cern.ch/</a> within our website: <a href="https://opendata.atlas.cern/" rel="noopener nofollow ugc">https://opendata.atlas.cern/</a></p> <p>If we try to setup the most basic configuration, like:</p> <pre><code class="lang-auto"><iframe src="https://opendata-forum.cern.ch/new-topic?title=topic%20title&category=atlas" style={{ width: '100%', height: '500px', border: 'none' }}></iframe> </code></pre> <p>We see the following message in the rendered frame:<br> <div class="lightbox-wrapper"><a class="lightbox" href="https://opendata-forum.cern.ch/uploads/default/original/1X/8111d5867079d25664b101d6914a20401ad77de6.png" data-download-href="https://opendata-forum.cern.ch/uploads/default/8111d5867079d25664b101d6914a20401ad77de6" title="image"><img src="https://opendata-forum.cern.ch/uploads/default/original/1X/8111d5867079d25664b101d6914a20401ad77de6.png" alt="image" data-base62-sha1="ipNNMRqsIzQWGnm2bIWxAnZ6rKm" width="690" height="394" data-dominant-color="232229"><div class="meta"><svg class="fa d-icon d-icon-far-image svg-icon" aria-hidden="true"><use href="#far-image"></use></svg><span class="filename">image</span><span class="informations">871×498 20.1 KB</span><svg class="fa d-icon d-icon-discourse-expand svg-icon" aria-hidden="true"><use href="#discourse-expand"></use></svg></div></a></div></p> <p>I have then a couple of questions:</p> <ol> <li>Is there another way to embed a topic creation in our website?</li> <li>If not, is it possible to add an exception for our website, so that we can properly embed the forum?</li> </ol> <p>Thanks a lot for your help,<br> Best,<br> Giovanni</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_2' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/gguerrie'><span itemprop='name'>gguerrie</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-09-09T11:07:40Z' class='post-time'> 9 September 2024 11:07 </time> <meta itemprop='dateModified' content='2024-09-09T11:07:40Z'> <span itemprop='position'>2</span> </span> </div> <div class='post' itemprop='text'> <p>Summoning <a class="mention" href="/u/jbenito">@jbenito</a> and <a class="mention" href="/u/tiborsimko">@tiborsimko</a>.<br> Thanks a lot for the help!</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_3' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/tiborsimko'><span itemprop='name'>tiborsimko</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-09-27T11:38:04Z' class='post-time'> 27 September 2024 11:38 </time> <meta itemprop='dateModified' content='2024-09-27T11:38:04Z'> <span itemprop='position'>3</span> </span> </div> <div class='post' itemprop='text'> <p>Hi <a class="mention" href="/u/gguerrie">@gguerrie</a></p> <p>As we spoke IRL, embedding a web site inside another web site is generally not recommended due to several reasons, both technical and practical: it may cause slower load times, worsen user experience due to inconsistent designs, increase mobile browser compatibility issues, and more importantly expose users to security risks related to content embedding. It is hard for the source web site to have any control over the targeted embedded content.</p> <p>Would it be possible for the ATLAS open data web site to simply link directly to the forum instead of embedding it?</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_4' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/gguerrie'><span itemprop='name'>gguerrie</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-09-27T11:56:21Z' class='post-time'> 27 September 2024 11:56 </time> <meta itemprop='dateModified' content='2024-09-27T11:56:21Z'> <span itemprop='position'>4</span> </span> </div> <div class='post' itemprop='text'> <p>Hi <a class="mention" href="/u/tiborsimko">@tiborsimko</a>,<br> We’ll then proceed to keep the current configuration, in which the forum is linked in our website.</p> <p>Thanks a lot for the clarifications!</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_5' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/zmarshal'><span itemprop='name'>zmarshal</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-09-27T13:13:57Z' class='post-time'> 27 September 2024 13:13 </time> <meta itemprop='dateModified' content='2024-09-27T13:13:57Z'> <span itemprop='position'>5</span> </span> </div> <div class='post' itemprop='text'> <p>Just one bonus question: is it possible to build a little submission form for questions that would go to the OD Forum? For example, if you have email injection enabled, you could I think allow it with a few switches?</p> <p>Best,<br> Zach</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_6' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/tiborsimko'><span itemprop='name'>tiborsimko</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-10-09T12:29:10Z' class='post-time'> 9 October 2024 12:29 </time> <meta itemprop='dateModified' content='2024-10-09T12:29:10Z'> <span itemprop='position'>6</span> </span> </div> <div class='post' itemprop='text'> <p>Hi Zach, would the people be already logged in via CERN Single Sign-On using their GitHub etc social accounts at the time you would like to inject their forum post from an external submission form? Or would the form be sort of “anonymous” and people would provide their email address and we’d rely on it and inject it “as is”? (The latter could lead to various impersonation troubles, somebody could start spoofing people en mass, etc.)</p> <p>There are also some security issues we’d have to carefully consider. The Discourse API allows to inject users, but this requires a sort of admin-level like access that the external web site hosting the form would need to have. What if that external web site gets compromised? A theoretical attacker could start injecting users at will.</p> <p>Moreover, I have not checked the Discourse API granularity, but it is possible that creating new users would be bound with similar actions, such as modifying existing users, and perhaps even more admin-level operations. If the granularity is not very fine-tuned but rather broad, then the theoretical attacker could do even more harm.</p> <p>I can check the granularity the Discourse API to be able to better judge the threats, but my gut feeling is that it would be both simpler and safer to just invite new users to come to the forum to create their accounts by themselves and ask the question directly.</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> <div id='post_7' itemprop='comment' itemscope itemtype='http://schema.org/Comment' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://opendata-forum.cern.ch/u/zmarshal'><span itemprop='name'>zmarshal</span></a> </span> <span class="crawler-post-infos"> <time itemprop='datePublished' datetime='2024-10-09T12:49:09Z' class='post-time'> 9 October 2024 12:49 </time> <meta itemprop='dateModified' content='2024-10-09T12:49:09Z'> <span itemprop='position'>7</span> </span> </div> <div class='post' itemprop='text'> <p>Hi <a class="mention" href="/u/tiborsimko">@tiborsimko</a> ,</p> <p>Ok, point taken. I’m less worried about some of these items, and we have used this functionality on the ATLAS forums, but I understand the concerns.</p> <p>Best,<br> Zach</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="0" /> <span class='post-likes'></span> </div> </div> </div> </div> <footer class="container wrap"> <nav class='crawler-nav'> <ul> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/' itemprop="url">Home </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/categories' itemprop="url">Categories </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/guidelines' itemprop="url">Guidelines </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/tos' itemprop="url">Terms of Service </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/privacy' itemprop="url">Privacy Policy </a> </span> </li> </ul> </nav> <p class='powered-by-link'>Powered by <a href="https://www.discourse.org">Discourse</a>, best viewed with JavaScript enabled</p> </footer> <div class="buorg"><div>Unfortunately, <a href="https://www.discourse.org/faq/#browser">your browser is unsupported</a>. Please <a href="https://browsehappy.com">switch to a supported browser</a> to view rich content, log in and reply.</div></div> </body> </html>