embedding youtube videos with security headers

  • Resolved startechmarketing

    (@startechmarketing)


    1 year, 9 months ago

    I am getting a 404 error on a page with embedded youtube video, I think the culprite is the security headers I put in custom code.

    I don’t know how to add Content-Security-Policy: default-src ‘none’; frame-src youtube.com https://www.youtube.com;

    this is what I added

    #Really Simple SSL

    Header always set Strict-Transport-Security: “max-age=31536000” env=HTTPS
    Header always set Content-Security-Policy “upgrade-insecure-requests;”
    Header always set Permissions-Policy: “”
    Header always set X-Content-Type-Options “nosniff”
    Header always set X-XSS-Protection “1; mode=block”
    Header always set Expect-CT “max-age=7776000, enforce”
    Header always set Referrer-Policy: “no-referrer-when-downgrade”

    #End Really Simple SSL

    can you please help me ? maybe it is another plugin but I can’t figure it out.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author AITpro

    (@aitpro)

    Most likely the 404 error is caused by the youtube video url being incorrect and not your CSP code. Remove your CSP code in Custom Code, save your changes and activate Root folder BulletProof Mode. If you are still getting a 404 error then your youtube video url is not valid.

    Thread Starter startechmarketing

    (@startechmarketing)

    Ok thanks I found the culprite in Complienz plugin..

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘embedding youtube videos with security headers’ is closed to new replies.