Child Item

Issues using Embedder in a lock-down CMS like SharePoint or TDX

Hi Dropbox devs!

I am trying to embed some Dropbox files into a knowledge article in TeamDynamix (TDX). I followed the Embedder API docs and I am able to embed files in a test web server, but not in TDX. Unfortunately, TDX does not allow data-* attributes, which your API requires for passing the API key, nor does it allow third-party javascript unless embedded in an iFrame. It appears the same is true of SharePoint Online - I can only embed iframes into a page, but I cannot add third-party JS.

Is there a way around this? Is there a way to use embedder through an iFrame (without having to develop my own web app)? If not, could you please consider this an important enhancement request? May of your corporate users will have a similar need as they are more likely to be using a CMS with enterprise-grade security features.

Competitors such as YouTube, Vimeo, Box and Microsoft Stream all allow embedding with either a script (like your API does) or an iFrame - and they all make it easy to embed by providing embed links under the Share menu. So in this regard, Dropbox is far behind the times...

Best regards,

Gabriel Mongefranco

Mobile Data Architect

University of Michigan | Eisenberg Family Depression Center

Find more posts tagged with

API

Abuse

Accepted answers

Greg-DB

Thanks for the feedback! Dropbox doesn't offer an option or alternative like this, such as using just an iframe directly, but I'll pass this along as a feature request. I can't promise if or when that might be implemented though.

All comments

gabrielmongefranco-umich

Please allow embedding dropbox files into other sites - in particular multimedia - using iframes, and make it easy to do so by providing iframe embed code in the Share menu of any file or folder.

See this post for more background information on why this is badly needed by enterprise customers who use locked-down, high-security content management systems (e.g. SharePoint Online, TDX, Google Sites).

https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Issues-using-Embedder-in-a-lock-down-CMS-like-SharePoint-or-TDX/m-p/725447#M32046

Thanks!

Gabriel Mongefranco

Mobile Data Architect

University of Michigan | Eisenberg Family Depression Center

Greg-DB

gabrielmongefranco-umich

Thanks Greg! I also submitted this as an idea here: https://www.dropboxforum.com/t5/Dropbox-ideas/Provide-iframe-embed-code-in-Share-menu/idi-p/725448

I was poking around the Embedder script and noticed that it essentially just generates the iframe code for you. I tried copying the iframe code shown by the browser (View source), and although it rendered the div, the actual iframe didn't load. Are there security restrictions that prevent this from happening, or does the file URL have to be formatted a certain way (besides URL encoding)? Just wondering if I can make it work by creating the iframe code manually, something like:

<div class="dropbox-embed-container" style="height: 100%; width: 100%;">
		<iframe src="https://www.dropbox.com/dropins/embed?app_key=***APP_KEY_HERE***&iframe=true&origin=***REFERRER_SCHEME_AND_DOMAIN_URL_ENCODED***&link=***LINK_TO_FILE_URL_ENCODED***" scrolling="no" style="height: 100%; width: 100%; border: 1;" />
	</div>

Thanks!

Gabriel.

Greg-DB

Unfortunately I don't have any specific guidance to offer for if/how it might be possible to build that directly, as that is not officially documented or supported. (And the details normally handled automatically by the script may be subject to change without notice.)