Peertube: CSP breaks embeds in Peertube 2.1.0

Created on 20 Feb 2020  路  2Comments  路  Source: Chocobozzz/PeerTube

The content security policy in the latest Peertube version is broken, so that embeds are not working. See the following link for an example. Trying to play the video results in an error message "Blocked by Content Security Policy".

https://radical.town/@felix/103689965787653294

To reproduce:

  1. in the instance config, set csp enabled: true
  2. embed a video on some other site (eg by posting a peertube link on mastodon)
  3. try to play the video
Security Type
Source
picture Nutomic

All 2 comments

Can confirm, for instance here:
https://djoerdhiemstra.com/2018/welcome-to-foundations-of-information-retrieval/

djoerd picture djoerd on 20 Feb 2020
👍1

Thanks for the issue. Should be fixed by https://github.com/Chocobozzz/PeerTube/commit/dfab4fa9c6d5b6f12ac844b191a51282b002d3f5

Chocobozzz picture Chocobozzz on 20 Feb 2020
👍1
Was this page helpful?
0 / 5 - 0 ratings

Related issues

NoraCodes picture NoraCodes  路  3Comments
conferences-gesticulees picture conferences-gesticulees  路  3Comments
gegeweb picture gegeweb  路  3Comments
sschueller picture sschueller  路  3Comments
filmaidykai picture filmaidykai  路  3Comments