View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0003580 | HTML & PERL | Bug Report - Interface | public | 2025-03-18 22:01 | 2025-04-01 16:45 |
| Reporter | Gurkenmaster | Assigned To | |||
| Priority | normal | Severity | trivial | Reproducibility | always |
| Status | new | Resolution | open | ||
| Summary | 0003580: Content Security Policy blocks youtube embeds frames in the AniDB Forum | ||||
| Description | 800646#c500573:340 Refused to frame 'https://www.youtube-nocookie.com/' because it violates the following Content Security Policy directive: "frame-src 'self' hcaptcha.com *.hcaptcha.com". 800646#c500573:341 Refused to frame 'https://www.youtube-nocookie.com/' because it violates the following Content Security Policy directive: "frame-src 'self' hcaptcha.com *.hcaptcha.com". 800646#c500573:757 Refused to frame 'https://www.youtube-nocookie.com/' because it violates the following Content Security Policy directive: "frame-src 'self' hcaptcha.com *.hcaptcha.com". | ||||
| Steps To Reproduce | Just go to https://anidb.net/forum/thread/801501#c500424 and try to play the video. | ||||
| Additional Information | The current content security policy is content-security-policy: default-src 'none'; connect-src 'self' hcaptcha.com *.hcaptcha.com; font-src *.anidb.net; form-action 'self'; img-src * data:; script-src 'self' *.anidb.net hcaptcha.com *.hcaptcha.com; style-src 'self' hcaptcha.com *.hcaptcha.com 'unsafe-inline' *; child-src kiwiirc.com *.youtube-nocookie.com www.google.com/recaptcha/; frame-ancestors 'self'; base-uri 'self'; manifest-src *.anidb.net; frame-src 'self' hcaptcha.com *.hcaptcha.com; It should be more like this: content-security-policy: default-src 'none'; connect-src 'self' hcaptcha.com *.hcaptcha.com; font-src *.anidb.net; form-action 'self'; img-src * data:; script-src 'self' *.anidb.net hcaptcha.com *.hcaptcha.com; style-src 'self' hcaptcha.com *.hcaptcha.com 'unsafe-inline' *; child-src kiwiirc.com *.youtube-nocookie.com www.google.com/recaptcha/; frame-ancestors 'self'; base-uri 'self'; manifest-src *.anidb.net; frame-src 'self' hcaptcha.com *.hcaptcha.com www.youtube-nocookie.com; | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-03-18 22:01 | Gurkenmaster | New Issue | |
| 2025-03-18 22:01 | Gurkenmaster | File Added: Screenshot From 2025-03-18 22-59-04.png | |
| 2025-04-01 16:45 | Gurkenmaster | Note Added: 0004501 |
