We’re no longer allowed to embed widgets; the
I'd love a solution, too. I'd add Google embeds (e.g. Google maps), fundraising integration (we use a widget from Causes.com for fundraising), and SurveyMonkey surveys.
Stephanie Kuenn, YALSA Web Services Manager
We recently found a very cost-effective solution for providing closed-captioning of embedded videos. However, the solution requires that
Steven L. HofmannManager, Web CommunicationsPublic Library Association312-280-5047 / 800-545-2433 x5047
Now I have to hope I never have to edit a page that came over to Drupal with a widget already embedded, because if I do, when I go to save the page, the system will give me the following error --
Request denied by WatchGuard FirewallReason: IPS detected for "VULN Cross-Site Scripting -7/Web Attack".
And won't let the page publish until and unless the widget script is removed??
Was the plan that we would only have social media widgets in the right-hand pods and never on any of our web pages themselves?
Valerie Hawkins Library Reference Specialist ALA Library American Library Association 50 East Huron Street Chicago, IL 60611-2795 Phone: (800) 545-2433, ext. 2154
...the restrictions are different on the unit homepages, since these homepages include the tabbed news/blog/Twitter/ALA Connect feeds?
The best that could be installed at THE home page at ALA.org was a broken version of the Twitter widget, which updated every 20 minutes in reaction to a timed maintenance check. That's why it's over to the side in a pod -- and even that took some doing! -- instead of underneath the news tabs like before.
Edited to add: And I ran into the Watchguard error in the first place while editing a basic page.
This is going to be a big deal for us - part of what ALA has been instructed to do with the website (overall) is to embrace Social Media. How can we do this if we can't use widgets? What do other sites do? Is this a case of ITTS being too diligent about the risks?
I've run into problems just with content (not even widgets) causing SQL injection errors. This is based on specific terms being used (i.e., exec).
Rebecca---are you running into those injection errors just trying to add text in the editor?
Program Officer, Online Applications
Public Programs Office // American Library Association
312.280.3272 // firstname.lastname@example.org
How about ITTS not disallowing script/iframe tags until the appropriate modules are in place? Unless there's an iminent security threat of course.
MAGIRT - a small round table - is working hard to get our online presence synched over the various outlets that we have. We use LibGuides, LinkedIn, Facebook, Twitter, ALA Connect and our website - and we don't want to have content that is outdated in one or to have our members have to post and repost and repost and repost. We'd like to embed some of our LibGuides boxes onto the ALA website so that our webmaster doesn't have to update rosters or addresses or titles and our committees can take ownership of their own information in a way that makes sense.
Tracey Hughes, Librarian, Colorado Mountain College
Yes, I too am interested in finding a way in which I do not have to post information in multiple sites -- an RSS Feed that allows a post on FB or Twitter to also appear on our website would be great w/o having to place information on different venues.
ADJUNCT & REFERENCE LIBRARIAN
I've been trying to schedule a brown bag lunch for ALA staff on this topic to produce a handout I could share generally, but I just haven't had time so far.
Until I do, check out http://ifttt.com, and to a lesser extent http://zapier.com, for help publishing once, posting everywhere.
To clarify, If This Then That (http://ifttt.com) will let you plug in an RSS feed and automatically post a notice to Facebook, Twitter, LinkedIn, etc. every time you publish a blog post (or anything else with an RSS feed). You can essentially connect any two services based on a trigger action (I have it automatically post my Flickr pictures to Facebook and Twitter).
This is likely old news to most of you, but just in case . . . hootsuite will also post things across different services. We use it on the GLBTRT website. Anytime a post is made on our blogs, a message about the post goes to our Facebook page and twitter account. You can also schedule messages to go out on select services or all of them (facebook, twitter, and others) from the hootsuite dashboard. You can also manage your conversations in these services from the hootsuite dashboard. It does have a monthly fee. http://hootsuite.com/