the secure PHP framework


Cannot embed Youtube video

4 February 2018, 22:54
Version : 6.1 on Ubuntu 16.04.3

When I embed Youtube video in Banshee, it cannot display. I use Hiawatha as well.

Any idea?
Hugo Leisink
5 February 2018, 10:31
No. Perhaps you did the embedding wrong?
5 February 2018, 10:55
I copied from the Youtube site. The area is blanked and no video can be displayed.
5 February 2018, 15:22
I tried to embed Vimeo video and it is failed to display the video too.

Joe Schmoe
5 February 2018, 16:28
This seems familiar. Does it have anything to do with the security headers in libraries/core/view.php?
Hugo Leisink
5 February 2018, 17:18
Good point Joe, that might be it. Samiux, uncomment the header() instruction for the Content-Security-Policy header. It's somewhere around line 611.
5 February 2018, 17:53
Hugo and Joe,
4 March 2018, 20:55
Thanks for this; just commented out line 611 in the referenced file in order to see the Open Street Map iframe in my Directions and Map page.

I guess the CustomHeader = X-Frame-Options: sameorigin setting in Hiawatha takes care of the security concern somewhat of having frames originating from other sites?
Hugo Leisink
6 March 2018, 20:44
Yes, that header should prevent browser from loading your website in a frame.