lib/onebox/engine/facebook_media_onebox.rb in onebox-2.0.2 vs lib/onebox/engine/facebook_media_onebox.rb in onebox-2.1.0

@@ -6,9 +6,10 @@
       include Engine
       include StandardEmbed
 
       matches_regexp(/^https?:\/\/.*\.facebook\.com\/(\w+)\/(videos|\?).*/)
       always_https
+      requires_iframe_origins "https://www.facebook.com"
 
       def to_html
         metadata = get_twitter
         if metadata.present? && metadata[:card] == "player" && metadata[:player].present?
           <<-HTML