LLL Embed Provider Review / 埋め込み先点検

List external hostnames of standard iframe blocks in a published saved article. 公開保存済み記事の標準iframeブロックの外部ホスト名を一覧する点検。

Public name@mrhandsome39.bsky.social/embed-provider-review

Or open Registry in your EmDash admin and search for this name.

Permissions

Plugins get only the capabilities they declare and you approve. Your EmDash admin lists these again before anything installs.

  • Read content

    Read entries from your site’s content collections.

  • Read content structure

    Read the collections and fields defined on your site.

FAQ

What is listed? For one Portable Text field of a published, saved article: the standard iframe blocks (and embed blocks in the shape the Gutenberg importer produces), with block position, block type and the destination hostname, plus a count per host.

What is not listed? HTML blocks and unknown/custom blocks are unsupported: they are counted and the result is marked partial, but never read. An iframe block with extra or mistyped fields belongs to another plugin and is treated as unknown. Destinations that are not readable hosts (for example an http iframe, a relative path) are counted as unreadable. Nothing inside text blocks, code blocks, images, galleries, videos or tables is inspected.

Why is my draft rejected? Only the published saved snapshot is read. Drafts, unsaved typing and pending revisions are never read.

Is the embed checked or fetched? No. Nothing is fetched. Only the hostname is shown; the full URL, query string, HTML, title and article text are not displayed.

Is this a privacy or safety review? No. It tells you which external services a saved article points to so that you can check consent notices, privacy policy wording and allow lists yourself.

Security

Capabilities: content:read, schema:read only. No network access (allowedHosts is empty), no storage, no writes, no scheduled work.

The panel route requires an authenticated user who may edit the entry (content:edit_own_drafts), reads only the published saved snapshot of the entry named by the editor context, and rejects drafts and pending revisions.

Output contains only the hostname (userinfo, port, path, query and fragment are dropped), the block position and the block type. The full URL, query, HTML, iframe title and article text are never returned. A report cell starting with =, +, - or @ gets a leading ' against spreadsheet formula execution.

Limits: field JSON 128 KiB, 2000 blocks, 200 listed embeds, report 48 KiB, full Blocks response validated. Over-limit input produces no partial result.

Changelog

0.1.0

Adds a read-only editor panel that lists the external hostnames of standard iframe blocks (and importer-shaped embed blocks) in a published saved article, with positions and per-host counts in English and Japanese. HTML and unknown blocks are reported as unsupported.

Installation

Install as a sandboxed EmDash plugin (EmDash 1.4.0 or later, below 2). Open a published, saved article and use the "Embed Provider Review / 埋め込み先点検" editor panel. Read-only; no configuration.

Keep exploring

More plugins like LLL Embed Provider Review / 埋め込み先点検

Browse by keyword, or see everything @mrhandsome39.bsky.social publishes.

Install on your site

Open in EmDash

LLL Embed Provider Review / 埋め込み先点検

@mrhandsome39.bsky.social/embed-provider-review

Choose the EmDash site where you want to review this plugin. Nothing is installed until you confirm its permissions in that site's admin.

This browser will remember the site. You can change it next time.