Iframe placeholders, security and resizing

components/dom_distiller/core/javascript/dom_distiller_viewer.js

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 function addToPage(html) {
   var div = document.createElement('div');
   div.innerHTML = html;
   document.getElementById('content').appendChild(div);
+  fillYouTubePlaceholders();
+}
+
+function fillYouTubePlaceholders() {
+  var placeholders = document.getElementsByClassName('embed-placeholder');
+  for (var i = 0; i < placeholders.length; i++) {
+    if (!placeholders[i].hasAttribute('data-type') ||
+        placeholders[i].getAttribute('data-type') != 'youtube' ||
+        !placeholders[i].hasAttribute('data-id')) {
+      continue;
+    }
+    var embed = document.createElement('iframe');
+    var url = 'http://www.youtube.com/embed/' +
+        placeholders[i].getAttribute('data-id');
+    embed.setAttribute('class', 'youtubeIframe');
+    embed.setAttribute('src', url);
+    embed.setAttribute('type', 'text/html');
+    embed.setAttribute('frameborder', '0');
+
+    var parent = placeholders[i].parentElement;
+    var container = document.createElement('div');
+    container.setAttribute('class', 'youtubeContainer');
+    container.appendChild(embed);
+
+    parent.replaceChild(container, placeholders[i]);
+  }
 }
 
 function showLoadingIndicator(isLastPage) {
   document.getElementById('loadingIndicator').className =
       isLastPage ? 'hidden' : 'visible';
   updateLoadingIndicator(isLastPage);
 }
 
 // Maps JS Font Family to CSS class and then changes body class name.
 // CSS classes must agree with distilledpage.css.
@@ skipping 92 matching lines @@
 document.getElementById('feedbackNo').addEventListener('click', function(e) {
   sendFeedback(false);
   document.getElementById('feedbackContainer').className += " fadeOut";
 }, true);
 
 document.getElementById('feedbackContainer').addEventListener('animationend',
     function(e) {
       document.getElementById('feedbackContainer').style.display = "none";
     }, true);