Title: Pym.js Embeds Author: Automattic Published: 17 Tháng 6, 2016 Last modified: 4 Tháng 5, 2026 --- Tìm kiếm plugin ![](https://ps.w.org/pym-shortcode/assets/banner-772x250.jpg?rev=1438598) Plugin này **chưa được cập nhật với 3 phiên bản mới nhất của WordPress**. Nó có thể không được hỗ trợ và bảo trì, và có thể xung đột với các phiên bản WordPress mới nhất. ![](https://ps.w.org/pym-shortcode/assets/icon.svg?rev=1944461) # Pym.js Embeds Bởi [Automattic](https://profiles.wordpress.org/automattic/) [Tải về](https://downloads.wordpress.org/plugin/pym-shortcode.2.0.0.zip) * [Chi tiết](https://vi.wordpress.org/plugins/pym-shortcode/#description) * [Đánh giá](https://vi.wordpress.org/plugins/pym-shortcode/#reviews) * [Cài đặt](https://vi.wordpress.org/plugins/pym-shortcode/#installation) * [Nhà phát triển](https://vi.wordpress.org/plugins/pym-shortcode/#developers) [Hỗ trợ](https://wordpress.org/support/plugin/pym-shortcode/) ## Mô tả Pym.js Embeds provides shortcode and Gutenberg block wrappers for embedding responsive iframes using [Pym.js](http://blog.apps.npr.org/pym.js/), developed by the NPR Visuals Team. Embedded content resizes vertically to match its container’s width. AMP compatibility is provided by the [official AMP plugin](https://wordpress.org/plugins/amp/). ### Pym.js Resources from NPR You may also want to look at NPR’s Pym.js resources: * [Pym.js homepage](http://blog.apps.npr.org/pym.js/) * [Pym.js repo on GutHub/nprapps](https://github.com/nprapps/pym.js/) ## Khối Plugin này cung cấp 1 khối. * Pym.js Embed ## Cài đặt 1. In the WordPress Dashboard go to **Plugins**, then click the **Add Plugins** button and search the WordPress Plugins Directory for Pym.js Embeds. Alternatively, you can download the zip file from this Github repo and upload it manually to your WordPress site. 2. Activate the plugin through the ‘Plugins’ screen in WordPress 3. In **Settings > Pym.js Embed Settings**, decide whether you’d like to change the plugin’s behavior to use a non-default source URL for `Pym.js`, and whether you’d like to prevent post authors from setting embed-specific URLs for `Pym.js` 4. Begin embedding content! ## Hỏi đáp For answers to frequently asked questions, [see this plugin’s documentation on GitHub](https://github.com/INN/pym-shortcode/tree/master/docs). For support resources, [see this plugin’s documentation on GitHub](https://github.com/INN/pym-shortcode/tree/master/docs). ## Đánh giá Không có đánh giá nào cho plugin này. ## Người đóng góp & Lập trình viên “Pym.js Embeds” là mã nguồn mở. Những người sau đã đóng góp vào plugin này. Những người đóng góp * [ Automattic ](https://profiles.wordpress.org/automattic/) * [ INN Labs ](https://profiles.wordpress.org/innlabs/) [Dịch “Pym.js Embeds” sang ngôn ngữ của bạn.](https://translate.wordpress.org/projects/wp-plugins/pym-shortcode) ### Muốn tham gia phát triển? [Duyệt code](https://plugins.trac.wordpress.org/browser/pym-shortcode/), check out [SVN repository](https://plugins.svn.wordpress.org/pym-shortcode/), hoặc theo dõi [nhật ký phát triển](https://plugins.trac.wordpress.org/log/pym-shortcode/) qua [RSS](https://plugins.trac.wordpress.org/log/pym-shortcode/?limit=100&mode=stop_on_copy&format=rss). ## Nhật ký thay đổi #### 2.0.0 Security fix: the `pymoptions` shortcode/block attribute is now parsed against an allowlist of known Pym.js Parent options (xdomain, title, name, id, sandbox, parenturlparam, parenturlvalue, allowfullscreen, optionalparams, trackscroll, scrollwait) and JSON- encoded at output time. Previously the attribute was inlined verbatim into the ` new pym.Parent(...)` call, which made it a stored XSS sink for any user who could author content. Documented usage (e.g. `pymoptions=" xdomain: '*\.npr\.org' "`) continues to work; arbitrary JavaScript values are dropped. Backwards-incompatible change: the pluggable function `pym_shortcode_script_footer_enqueue` now receives `$args['pymoptions']` as an associative array of sanitized options rather than a raw JavaScript object body string. Sites that override this pluggable function must update their override to consume the array (and JSON-encode it safely on output). #### 1.3.2.4 * Now tested up to WordPress 5.4 and Gutenberg 7.8. * Fixes a presentational error in the Pym.js Embeds Block’s block inspector control within the editor. PR [#74](https://github.com/INN/pym-shortcode/pull/74) for issue [#72](https://github.com/INN/pym-shortcode/issues/72). #### 1.3.2.3 New features: * Adds compatibility with [the official WordPress AMP Plugin](https://wordpress.org/plugins/amp/). On AMP endpoints, markup for Pym.js-based embeds is converted to `amp-iframe` tags. If you’re not using the AMP Plugin, your site won’t be affected. And if you’re not viewing a page on an AMP endpoint, the page won’t be affected. PR [#62](https://github.com/INN/pym-shortcode/pull/62) by Claudiu Lodromanean, [originally for Automattic’s Newspack](https://github.com/Automattic/newspack-plugin/pull/276). Other updates: * Adds credit to GitHub user [eidietrich](https://github.com/eidietrich) for [PR #55](https://github.com/INN/pym-shortcode/pull/55) in the 1.3.2.2 release notes. * Fixes a ‘nwesroom’ typo. [PR #66](https://github.com/INN/pym-shortcode/pull/66) for issue [#65](https://github.com/INN/pym-shortcode/issues/65). #### 1.3.2.2 * Plugin is now tested against WordPress 5.0 beta 3. * Adds support for WordPress 5.0. * Fixes bug where the Pym.js Embeds block did not work in WordPress 5.0. [PR #58](https://github.com/INN/pym-shortcode/pulls/58) for [issue #57](https://github.com/INN/pym-shortcode/issues/57). * Adds advice for where to host graphics files. [PR #55](https://github.com/INN/pym-shortcode/pull/55) from Github user [eidietrich](https://github.com/eidietrich). #### 1.3.2.1 **This is a major update! Please read the release notes.** Following the practice begun at plugin version 1.1.2 of [having the plugin version number match the version number of the bundled copy of `Pym.js`](https://github.com/INN/pym-shortcode/blob/master/docs/maintainer-notes.md), the first three numbers in this plugin’s version do not change with this release because the `Pym.js` version has not changed. We’ve tacked a `.1` on to the end to denote this release. Please read the release notes and test your site as appropriate before upgrading in production. We wish to thank all who helped us test [the release candidate](https://github.com/INN/pym-shortcode/releases/tag/v1.3.2.1-rc1) for this version, including Mike Janssen at [Current.org](https://current.org/) and Alyson Hurt at the NPR Visuals Team. New features: * Plugin renamed from “Pym Shortcode” to “Pym.js Embeds”. * Adds a “Pym.js Embed” block for use in Gutenberg. [PR #34](https://github.com/INN/pym-shortcode/pull/34) for issue [#28](https://github.com/INN/pym-shortcode/issues/28). - If a block is created using this plugin and Gutenberg, and Gutenberg is then disabled, the block will show a link to the embedded graphic. * Through the settings page, you can now serve Pym.js using your newsroom’s CDN or NPR’s CDN! PR #45 for [issue #31](https://github.com/INN/pym-shortcode/issues/31). * Adds a settings page, available to [those users with the `manage_options` capability](https://codex.wordpress.org/Roles_and_Capabilities#Capability_vs._Role_Table), with the following options: - Change the default pymsrc URL. [PR #45](https://github.com/INN/pym-shortcode/pull/45) for [issue #8](https://github.com/INN/pym-shortcode/issues/8). - Override block and shortcode pymsrc URLs with the default pymsrc URL. [PR #45](https://github.com/INN/pym-shortcode/pull/45) for [issue #8](https://github.com/INN/pym-shortcode/issues/8). * Adds an informational page, available to all who can make posts, that lists the plugin’s default source URL for `Pym.js`. This is to make the process of building new interactives easier. * Shortcode now gains an explicit `align=""` parameter, so that WordPress’s generated [alignment CSS classes](https://codex.wordpress.org/CSS#WordPress_Generated_Classes) can be used on embeds. By enabling this in the shortcode, the Gutenberg Block also gains support for alignment. [PR #34](https://github.com/INN/pym-shortcode/pull/34). Prior to this release, the alignment classes could be added via the `class=""` parameter. * Script tags for embeds are no longer output by `the_content()`, instead being output during `wp_footer()` by [closures](https://secure.php.net/manual/en/functions.anonymous.php) hooked on the `'wp_footer'` action. [PR #34](https://github.com/INN/pym-shortcode/pull/34) for issues [#33](https://github.com/INN/pym-shortcode/issues/33) and [#35](https://github.com/INN/pym-shortcode/issues/35). * The script tag used to run `new pym.Parent` is now configurable. By replacing the [pluggable function](https://codex.wordpress.org/Pluggable_Functions) `pym_shortcode_script_footer_enqueue()` with your own function, you can now use alternate forms of embed code that may be required for PJAX sites or custom versions of Pym.js. This resolves issue [#19](https://github.com/INN/pym-shortcode/issues/19). * Adds “Requires PHP: 5.3” metadata to the plugin’s `readme.txt`, since we’re now using PHP namespaces for some code. * Adds documentation for how to test the plugin: - tests to run before enabling the “override pymsrc” option in production - tests to run for site compatibility with Gutenberg Changes: * The source URL for `pymjs`, known as the pymsrc URL, is now passed through [wp_http_validate_url](https://developer.wordpress.org/reference/functions/wp_http_validate_url/). [PR #45](https://github.com/INN/pym-shortcode/pull/45) for [issue #8](https://github.com/INN/pym-shortcode/issues/8). * The source URL for `pym.js` is no longer output by `the_content()`, instead being output during `wp_footer` by an action dedicated to the task. If different shortcodes and/or blocks on the page specify different source URLs for Pym.js, all are output( after removing duplicates), but a message is logged in the browser console. If` WP_DEBUG` is set, this message is also logged to the server log, with the post ID specified. [PR #34](https://github.com/INN/pym-shortcode/pull/34) for issues [#33](https://github.com/INN/pym-shortcode/issues/33) and [#35](https://github.com/INN/pym-shortcode/issues/35). See https://github.com/INN/pym-shortcode/tree/master/docs#ive-set-a-different- pymsrc-option-but-now-im-seeing-a-message-in-the-console * `docs/updating-pym.md` becomes `docs/maintainer-notes.md` * Script tags for embeds are no longer output by `the_content()`, instead being output during `wp_footer()` by [closures](https://secure.php.net/manual/en/functions.anonymous.php) hooked on the `'wp_footer'` action. [PR #34](https://github.com/INN/pym-shortcode/pull/34) for issues [#33](https://github.com/INN/pym-shortcode/issues/33) and [#35](https://github.com/INN/pym-shortcode/issues/35). Removed: * Script tags for embeds are no longer output by `the_content()`, instead being output during `wp_footer()` by [closures](https://secure.php.net/manual/en/functions.anonymous.php) hooked on the `'wp_footer'` action. [PR #34](https://github.com/INN/pym-shortcode/pull/34) for issues [#33](https://github.com/INN/pym-shortcode/issues/33) and [#35](https://github.com/INN/pym-shortcode/issues/35). #### 1.3.2 * _RECOMMENDED UPDATE_ : Pym.js users, NPR has released an update that closes a potential security hole. We recommend everyone update to 1.3.2. * Update to Pym.js version 1.3.2: https://github.com/nprapps/pym.js/releases/tag/ v1.3.2 (Changelog at https://github.com/nprapps/pym.js/blob/v1.3.2/CHANGELOG) #### 1.3.1 * Update to Pym.js version 1.3.1: https://github.com/nprapps/pym.js/releases/tag/ v1.3.1 (Changelog at https://github.com/nprapps/pym.js/blob/v1.3.1/CHANGELOG) * (we skipped pym.js version 1.3.0: https://github.com/nprapps/pym.js/releases/ tag/v1.3.0) #### 1.2.2 * Update to Pym.js version 1.2.2: https://github.com/nprapps/pym.js/releases/tag/ v1.2.2 (Changelog at https://github.com/nprapps/pym.js/blob/master/CHANGELOG ) * (we skipped Pym.js version 1.2.1: https://github.com/nprapps/pym.js/releases/ tag/v1.2.1 ) * Add `id=""` attribute to allow setting custom IDs on embeds. [#21](https://github.com/INN/pym-shortcode/issues/21) * Add `class=""` attribute to allow setting custom classes on embeds. [#22](https://github.com/INN/pym-shortcode/issues/22) and [#23](https://github.com/INN/pym-shortcode/issues/23). * Add a default class name `pym` to all embed-containing div elements output by this plugin, and a filter ‘pym_shortcode_default_class’ to allow changing it. #### 1.2.0.2 * Fix encoding error on pym.v1.min.js, [thanks to lchheng](https://github.com/INN/pym-shortcode/pull/18) #### 1.2.0.1 * Add attribution for lchheng’s [pymsrc fix](https://github.com/INN/pym-shortcode/pull/17). #### 1.2.0 * Update to Pym.js version 1.2.0: https://github.com/nprapps/pym.js/releases/tag/ v1.2.0 (Changelog at https://github.com/nprapps/pym.js/blob/v1.2.0/CHANGELOG ) * Fixes a bug where the `pymsrc` attribute might have been ignored, for real this time. [Thanks, lchheng!](https://github.com/INN/pym-shortcode/pull/17) #### 1.1.2 * Update to Pym.js version 1.1.2: https://github.com/nprapps/pym.js/releases/tag/ v1.1.2 * Switch the new default url of `Pym.js` in this plugin to `js/pym.v1.min.js`, leaving the existing `js/pym.js` where it is. * Provide additional notes in [the documentation](https://github.com/INN/pym-shortcode/tree/master/docs) for maintainers on updating `Pym.js` in this plugin * Fixes a bug where the `pymsrc` attribute might have been ignored * Fixes and corrections to documentation. #### 1.0 * First release of the plugin ## Meta * Phiên bản **2.0.0** * Cập nhật lần cuối **3 tuần trước** * Số lượt cài đặt **90+** * Phiên bản WordPress ** 3.0.1 hoặc cao hơn ** * Đã kiểm tra lên đến **5.4.19** * Phiên bản PHP ** 5.3 hoặc cao hơn ** * Ngôn ngữ * [English (US)](https://wordpress.org/plugins/pym-shortcode/) * Thẻ * [Embeds](https://vi.wordpress.org/plugins/tags/embeds/)[iframe](https://vi.wordpress.org/plugins/tags/iframe/) [javascript](https://vi.wordpress.org/plugins/tags/javascript/)[responsive](https://vi.wordpress.org/plugins/tags/responsive/) [shortcode](https://vi.wordpress.org/plugins/tags/shortcode/) * [Nâng cao](https://vi.wordpress.org/plugins/pym-shortcode/advanced/) ## Đánh giá Chưa có đánh giá nào được gửi. [Your review](https://wordpress.org/support/plugin/pym-shortcode/reviews/#new-post) [Xem tất cả đánh giá](https://wordpress.org/support/plugin/pym-shortcode/reviews/) ## Những người đóng góp * [ Automattic ](https://profiles.wordpress.org/automattic/) * [ INN Labs ](https://profiles.wordpress.org/innlabs/) ## Hỗ trợ Có điều gì muốn nói? cần giúp đỡ? [Xem diễn đàn hỗ trợ](https://wordpress.org/support/plugin/pym-shortcode/) ## Ủng hộ Bạn có muốn hỗ trợ vào sự phát triển của plugin này? [ Ủng hộ plugin này ](https://inn.org/donate)