External snippets that paste in
Half the web hands you a block of HTML and says “paste this on your site.” Those
snippets are just raw HTML and a <script>, so they work here because this site
turns on Hugo’s unsafe Markdown. A few of the common ones:
A GitHub Gist
Gists embed with a single script tag pointed at the gist’s .js URL:
A CodePen
CodePen’s embed is a <p> placeholder plus their ei.js, which swaps in a live
editor (this is the example pen from CodePen’s own docs):
See the Pen on CodePen.
A social post
Mastodon (and X, Bluesky, Instagram…) hand you an <iframe> plus a small script
that resizes it. Because the iframe is real HTML, the post shows even if the
script is blocked — it just won’t auto-fit its height. Here is Mastodon’s own
account:
A bare iframe
And when all else fails, a plain <iframe> embeds anything that allows it — a
map, a slide deck, a dashboard:
Every embed above points at a real, live resource — so what you see here is what a reader gets, with no platform owning your page.