search

TASVideos / tasvideos

The code for the live TASVideos website
https://tasvideos.org/
GNU General Public License v3.0
63 stars 29 forks source link

All Youtube Embeds are blocked #1852

Closed Masterjun3 closed 1 month ago

Masterjun3 commented 1 month ago

All YouTube embeds show "Blocked Page".

In firefox, the request is cancelled with a "NS_ERROR_DOM_COEP_FAILED" error, which means

Used to indicate that a resource load was blocked because of the Cross-Origin-Embedder-Policy response header

Example: image

YoshiRulz commented 1 month ago

This is happening because, despite what Google's own documentation says, Cross-Origin-Embedder-Policy does require buy-in from third-parties just like CORS before it, at least for <iframe/>s. The "intended" solution is for YouTube to set its header. Don't hold your breath. There is a fix for Chrome—<iframe credentialless/> or maybe <iframe allow="cross-origin-isolated"/>—but to cover older Chrome and other browsers, we'll have to relax the COEP header to unsafe-none, which is the most lax. It's also the default, but I think the header should be set explicitly.