Opened on 12/03/2014 at 01:01:32 PM
Closed on 12/11/2014 at 10:33:23 AM
#1653 closed defect (fixed)
YouTube video blocked when accessing adblockplus.org with unspecified language
| Reported by: | greiner | Assignee: | trev |
|---|---|---|---|
| Priority: | P1 | Milestone: | |
| Module: | Infrastructure | Keywords: | adblockplus.org |
| Cc: | Blocked By: | ||
| Blocking: | Platform: | Unknown | |
| Ready: | yes | Confidential: | no |
| Tester: | Verified working: | no | |
| Review URL(s): | |||
Description
Environment
Browser supporting Content Security Policy
How to reproduce
- Go to https://adblockplus.org and observe YouTube video
- Go to https://adblockplus.org/en/ and observer YouTube video
Observed behaviour
- YouTube video doesn't load in (1) but does load in (2).
- CSP in (1): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'
- CSP in (2): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; frame-src www.youtube-nocookie.com;
Expected behaviour
- YouTube video loads in both scenarios.
- CSP in (1) and (2): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; frame-src www.youtube-nocookie.com;
Attachments (0)
Change History (2)
Note: See
TracTickets for help on using
tickets.
Fixed.