Embed YouTube

foswiki.org topic

https://foswiki.org/System/OEmbedPlugin#Youbtube

Solution: CSP + referrerpolicy

• FOSWIKI / Configure > Security and Authentication
• HTTP Security Headers
• {Http}{ContentSecurityPolicy}{'frame-src'}: I added * after 'self' (according to the response headers of the Foswiki.org site)
• I added the referrerpolicy="strict-origin-when-cross-origin" directive to the iframe
• but in future, I could use the OEmbedPlugin - this also requires the CSP for frame-src to be correct!

Using the YouTube embed code

This content is blocked. Contact the site owner to fix the issue.

Using the OEmbedPlugin

First looks good, but when clicking the Play button, you also get "This content is blocked. Contact the site owner to fix the issue."