Embedded content

Users can embed content from external providers, like YouTube videos and Figma designs, in Markdown. You choose which embed providers to allow on your instance. For the available providers and their IDs, see embedded content.

GitLab defines the available embed providers. Each provider defines the URLs it accepts, the URL the content loads from, and the browser sandbox restrictions on its content. You cannot add providers.

Content from an allowed provider loads inside pages in GitLab and can run scripts in the browsers of users who view it. Allow only providers you trust.

If you stop allowing a provider or turn off embedded content, existing content from those providers displays as a link to its original URL. If you allow a provider or turn on embedded content, existing content is not embedded until GitLab next renders it, like when someone edits it.

Choose embed providers

Prerequisites:

• Administrator access.

To choose which embed providers users can embed content from:

1. In the upper-right corner, select Admin.
2. In the left sidebar, select Settings > General.
3. Expand Embedded content.
4. Select the Enable embedded content checkbox.
5. Under Embed providers, select the checkbox for each provider to allow.
6. Select Save changes.

You can also choose embed providers with the application settings API, by using the iframe_rendering_enabled and iframe_rendering_allowlist attributes.