Opened 5 years ago

Closed 5 years ago

#1653 closed defect (fixed)

YouTube video blocked when accessing adblockplus.org with unspecified language

Reported by: greiner Assignee: trev
Priority: P1 Milestone:
Module: Infrastructure Keywords: adblockplus.org
Cc: Blocked By:
Blocking: Platform: Unknown
Ready: yes Confidential: no
Tester: Verified working: no
Review URL(s):

Description

Environment

Browser supporting Content Security Policy

How to reproduce

  1. Go to https://adblockplus.org and observe YouTube video
  2. Go to https://adblockplus.org/en/ and observer YouTube video

Observed behaviour

  • YouTube video doesn't load in (1) but does load in (2).
  • CSP in (1): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'
  • CSP in (2): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; frame-src www.youtube-nocookie.com;

Expected behaviour

  • YouTube video loads in both scenarios.
  • CSP in (1) and (2): default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; frame-src www.youtube-nocookie.com;

Change History (2)

comment:1 Changed 5 years ago by trev

  • Owner set to trev
  • Priority changed from Unknown to P1

comment:2 Changed 5 years ago by trev

  • Resolution set to fixed
  • Status changed from new to closed

Fixed.

Note: See TracTickets for help on using tickets.