Project

General

Profile

Actions

Bug #77409

closed

Invalid origin for JS API enabled Youtube videos

Added by Sebastian Michaelsen over 7 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Should have
Category:
-
Target version:
-
Start date:
2016-08-04
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
7
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

The YouTubeRenderer has the option enablejsapi that allows script access on the embedded Youtube video.

That is a feature provided by Youtube, which is documented here: https://developers.google.com/youtube/player_parameters#origin
As recommended the YouTubeRenderer sets the origin parameter, but it only contains the host name while in Youtube examples origin also contains the request scheme.

For me accessing the video only works when the origin is provided with request scheme.

<iframe id="ytplayer" type="text/html" width="640" height="390" src="https://www.youtube.com/embed/M7lc1UVf-VE?autoplay=1&origin=example.com" frameborder="0"></iframe>
=> script access doesn't work

<iframe id="ytplayer" type="text/html" width="640" height="390" src="https://www.youtube.com/embed/M7lc1UVf-VE?autoplay=1&origin=http://example.com" frameborder="0"></iframe>
=> script access works


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #77953: Bugfix only use domain with scheme for youtube originClosed2016-09-15

Actions
Actions

Also available in: Atom PDF