kaltura / mwEmbed

Kaltura's Cross Platform Video Player ToolKit
http://player.kaltura.com
GNU Affero General Public License v3.0
210 stars 136 forks source link

fix(FEC-12322): add alternatives to getReferer logic #4287

Closed lianbenjamin closed 2 years ago

lianbenjamin commented 2 years ago

the issue: in some cases, browsers, for example, Safari, will not pass $_SERVER['HTTP_REFERER'] and then the fallback would be 'http://www.kaltura.com/'. If a customer is using an ACP where certain domains are allowed (excluding kaltura.com) and the browser did not pass the HTTP_REFERER, then the player will display an error.

solution: pass parentDomain as uiconf var to server side with value of document.URL and use it as an alternative when the server side is getting the referer.

Solves FEC-12322

PlaykitJs-Bot commented 2 years ago

Live Pull Request Urls

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 9a7ae8a3d52ab913e6e17e38d77cfc0c532d7bce

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 9a7ae8a3d52ab913e6e17e38d77cfc0c532d7bce

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 1e8aa34a40828e89306b3838b6c333b30902dcfc

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 2d9fa3d0498ccf0ee5bc349353dd57d35cd9a25c

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 854b9928591491d0a2c6bef9154c922ad9425ae4

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 854b9928591491d0a2c6bef9154c922ad9425ae4

PlaykitJs-Bot commented 2 years ago

Updated pull request 4287: 855aabd53d444eab939c86c87f8f1bb34256c1b4