Peertube: CSP breaks embeds in Peertube 2.1.0

Created on 20 Feb 2020  路  2Comments  路  Source: Chocobozzz/PeerTube

The content security policy in the latest Peertube version is broken, so that embeds are not working. See the following link for an example. Trying to play the video results in an error message "Blocked by Content Security Policy".

https://radical.town/@felix/103689965787653294

To reproduce:

  1. in the instance config, set csp enabled: true
  2. embed a video on some other site (eg by posting a peertube link on mastodon)
  3. try to play the video
Security Type
Source
picture Nutomic

All 2 comments

Can confirm, for instance here:
https://djoerdhiemstra.com/2018/welcome-to-foundations-of-information-retrieval/

djoerd picture djoerd on 20 Feb 2020
👍1

Thanks for the issue. Should be fixed by https://github.com/Chocobozzz/PeerTube/commit/dfab4fa9c6d5b6f12ac844b191a51282b002d3f5

Chocobozzz picture Chocobozzz on 20 Feb 2020
👍1
Was this page helpful?
0 / 5 - 0 ratings

Related issues

filmaidykai picture filmaidykai  路  3Comments
kabo picture kabo  路  3Comments
Jorropo picture Jorropo  路  3Comments
roipoussiere picture roipoussiere  路  3Comments
ChameleonScales picture ChameleonScales  路  3Comments