Embed Files from Google Drive vs Strands PDF Embed

Embedder For Google Drive gives authors easy access to their Google Drive in a popup box, where they can select documents to embed directly into their post or page. Just as easily as picking a photo from the WordPress media gallery. Documents can be embedded in-line, using Google’s read-only interactive viewer for your audience to read them. Documents can also be placed in your site as links to open up editable files (either in the same or a new browser tab), or downloaded straight to the computer. You will need to set document sharing settings to ensure your website viewers have access to view your documents (e.g. at least ‘anyone with the link can view’ to be visible to all visitors). This plugin requires that you also install the free (or premium/enterprise) version of the popular Google Apps Login plugin Displays many file types such as PDF, Word DOC, ZIP, Videos, Images etc plus native Google docs (Spreadsheet, Drawing, Forms, etc). Step through a list of your Drive files or search to find the one you’re looking for. Choose from: Viewer file link – full page Google viewer and editor Download file link – directly download file to your computer (disabled for native Google doc formats) Embed document – display most file types inline in your posts or pages (non-Google file types need sharing settings at least ‘anyone with the link can view’) Useful for public websites or private intranets (all visitors should be able to view files as long as sharing settings are ‘anyone with the link can view’ or higher in Google Drive). Works on all WordPress installations including multisite networks. Please note that to embed folders you will require the Premium or Enterprise version of this plugin. Paid versions and Support You can also purchase the premium or enterprise versions of Embedder For Google Drive, including support. The Premium version contains some important extra features: Browse My Drive, Recent Files, Starred, and Shared With Me tabs to locate Drive files the way you’re used to. Embed Folders: simply keep your Google Drive folder up-to-date with your files, and your staff or website visitors will always be able to view a list of the latest documents. Google Calendars: pick from your Google Calendars and provide download links to ICAL or XML, or embed them directly in your site. Support and updates for one year. Premium – See details and purchase The Enterprise version integrates Google Drive much more closely with your WordPress intranet, essentially allowing each page or post on your intranet to host its own file attachments, completely backed by Drive. This means you no longer need to manage Drive and your Intranet as two completely separate document sharing systems! It also introduces advanced interactive embedded folders, where users can preview files and drill-down into subfolders all without leaving your site. It also contains all the features of the basic and premium versions, plus support for Team Drives (Shared Drives). Enterprise – Find out more Requirements Google Drive document embedding and one-click login will work for the following domains and user accounts: G Suite Basic (Google Apps for Work) G Suite Business (Google Apps Unlimited for Work) G Suite for Education (Google Apps for Education) G Suite for Non-profits (Google Apps for Non-profits) G Suite for Government (Google Apps for Government) Personal gmail.com and googlemail.com emails Google Apps Login plugin setup requires you to have admin access to any G Suite domain (formerly Google Apps), or a regular Gmail account, to register and obtain two simple codes from Google. Google Apps Login The Google Apps Login plugin (which you must also install) allows existing WordPress user accounts to log in to the website using Google to securely authenticate their account. This means that if they are already logged into Gmail for example, they can simply click their way through the WordPress login screen – no username or password is explicitly required! Full support and premium features are also available for purchase: Eliminate the need for G Suite / Google Apps domain admins to separately manage WordPress user accounts, and get peace of mind that only authorized employees have access to the organizations’s websites and intranet. See https://wp-glogin.com/

PDF Embed renders PDFs directly in your pages using PDF.js: no plugins for the visitor, no Google Docs iframes, no third-party trackers. PDF.js is bundled inside the plugin and served from your own site, so no third-party requests are ever made. Built by Fren at Strands Services Ltd. Support: [email protected]. Features Continuous vertical scroll across all pages, with lazy rendering via IntersectionObserver Page navigation, zoom, fit-to-width, download, and print controls (these toggle which buttons render in the toolbar; they’re a UI choice, not access control; see the Security section) Global sizing modes: Responsive, Fixed, or Fixed Aspect Ratio (A4, Letter, 16:9, 4:3, 1:1, or custom) Light, Dark, or Auto color mode (Auto follows the visitor’s OS/browser prefers-color-scheme) Per-mode color customization (with alpha/transparency support on the Page Shadow field), plus a safely-scoped Custom CSS field for power users Live preview on the settings page Editors: Gutenberg block, Classic Editor TinyMCE button, Enfold ALB element, Elementor widget, WPBakery element, and [pdf_embed] shortcode Media Library picker filtered to PDFs only Translation-ready (English + Hungarian included) Theme-overridable viewer template Shortcode [pdf_embed id="123" sizing="responsive" download="yes" navigation="yes" zoom="yes"] All attributes are optional except id. Per-embed attrs override the global defaults on the Sizing and Appearance tabs. Security Frontend visitors have no attack surface: no REST endpoints, no AJAX handlers, no form submissions. Shortcode attribute sanitizers reject any value outside strict whitelists (units, hex/rgba colors, W:H ratios). Attachment access is gated by current_user_can('read_post', $id); contributors cannot embed other users’ private PDFs. pdfjsLib.getDocument() is called with isEvalSupported: false to prevent font-based JS execution. All output is routed through WordPress’s escape functions (esc_html, esc_attr, esc_url, wp_kses, wp_print_inline_script_tag). The release pipeline includes a check that fails the build if a phpcs:ignore for the output-escaping sniff ever appears in shipped code. Canvas size is clamped to ~268M pixels per page. Page count is capped at 2000 per embed. Both prevent client-side DoS from hostile PDFs. PDF.js ships inside the plugin and loads only from your own domain; no third-party servers are contacted. Debug information (attempted mime, extension) is only emitted when WP_DEBUG is on. Content-Security-Policy: the plugin emits one inline (appearance CSS variables) and one inline (PDF.js loader). The script tag is rendered via wp_print_inline_script_tag(), so a CSP supplied through the wp_inline_script_attributes filter is applied automatically. On sites without wiring, strict CSP needs style-src 'unsafe-inline' and script-src 'unsafe-inline' for the viewer to boot. Toolbar toggles are UI affordances, not access control. The shortcode’s download, navigation, and zoom attributes (and the matching options in the editors) control which buttons appear in the viewer toolbar; they don’t restrict what the visitor’s browser can do once the page is rendered. PDF.js needs the entire PDF in the browser to display it, so the bytes are always reachable from the browser’s network/devtools panel by anyone who can see the page. The pdfEmbedGetInstance(container) JS handle also exposes the underlying viewer methods regardless of which buttons render. If you need to keep a PDF away from a viewer, gate the post behind WordPress’s permission system (private/draft, role-restricted, members-only plugin). Don’t rely on the toolbar toggles. Third-party libraries The plugin bundles minified copies of these libraries under assets/js/vendor/. Full un-minified source is available from each project’s repository at the pinned version listed below: PDF.js 5.7.284 (pdf.min.js, pdf.worker.min.js) — Apache 2.0 — https://github.com/mozilla/pdf.js/releases/tag/v5.7.284 wp-color-picker-alpha 3.0.4 (wp-color-picker-alpha.min.js) — GPL-2.0-or-later — https://github.com/kallookoo/wp-color-picker-alpha Phosphor Icons (inline SVG, Regular weight) — MIT — https://github.com/phosphor-icons/core The plugin’s own PHP, JS, and CSS is shipped as-is without minification so the deployed code is also the source.