Embed third-party content on a page using an iframe

Owned by Jess Pietsch (Unlicensed)
Last updated: 19 Jul, 2024 by Jo Tayler
2 min read

Third-party tools can be added if they are accessible, user-friendly and have met Privacy Impact Assessment (PIA) standards. in

Examples of third-party tools:

  • payment gateways

  • chatbot and live chat

  • registration and members-only spaces/online groups

  • search marketing

  • data visualisation tools (e.g. Power BI)

Third-party content must be added to our whitelist before it can be successfully added to a page in the Vic Gov content management system (CMS).

Your department/business unit is responsible for the accuracy and completeness of the PIA. Your legal department should also be checking the terms of use to make sure you have the rights to use the tool. The vic.gov.au team reserves the right to raise with the relevant statutory body if there are concerns.

 Instructions

  1. Search for the page you’d like to add the iFrame to and add a new text field or update an existing text field.

    • For a new page, navigate to the Page content section, then select Add Component, then select Basic text.

       

    • For an existing page, navigate to the Page content section and select Edit in the Basic text field.

    • Click on the icon.

  2. Add a Title and URL (not the full iFrame source code), unless you’re embedding.
    Width and height are currently mandatory fields, but the dimensions are not being picked up by the live site. You may have been given dimentions as part of the embed code, so you can use these.
    If you have been given a string of embed code that contains more information than just a URL, copy only the URL from the code and paste it into the URL field. Select OK.

  3. Preview the page.

    1. If you can see the embedded content, you and proceed to publish.

    2. If you can’t see the embedded content, your URL may not be on our whitelist.

  4. Submit a SDP technical support ticket to request the URL is whitelisted for use in our CMS (added to our Content Security Policy (CSP)).

  5. If an outcome of your completed PIA is that you need to add information to the vic.gov.au website privacy statement, contact the our support desk with suggested wording.