Problem with allowing Vimeo embedded videos

  • Resolved theillustrator

    (@theillustrator)


    1 year, 9 months ago

    Hello,

    On my website for onlinecourses I have two issues occuring with embedded videos, after I set the Content security policies, using redirection plugin. I did not have it prior to installing the plugin and setting policies.

    With Policy settings I found

    1. Vimeo videos, embedded show “Sorry…” and then a button students need to press, redirected outside my site and then allowed to view the video class.
    2. So, I read this website referring to the same issue and using Chrome, saying how they solved this, by adding a website address like this: Content Security Policy – and then:
      frame-src ‘self’ https://embed.vimeo.com;
    3. I tried that but that totally removed the embedded video from my website online course lessons.

    So, does anyone know how to solve this?

    Thanks in advance,
    Stefan

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author John Godley

    (@johnny5)

    I would remove the header until you can find the policy that works best for your site.

    Thread Starter theillustrator

    (@theillustrator)

    Hi John,

    In trying your suggestion to remove it, the plugin, I still have the error message.

    Before deactivating the plugin I first pressed the trashcvan icon in the Redirection plugin.

    And then deactivated the plugin.

    But still see the error message. Would you know where, which files, I should open and manually remove these codes?

    Kind regards

    Stefan L
    in Stockholm

    Plugin Author John Godley

    (@johnny5)

    You only needed to remove the headers from the plugin. If you’ve deleted the plugin entirely then it isn’t running and is having no effect on your site.

    Thread Starter theillustrator

    (@theillustrator)

    Hi,
    Thanks. I would had thought so too.
    But, whet happen now is that what was never an issue with vimeo videos embedded in an online course I have – with password protected videos – have now just become an issue. After installing the plugin.

    So, even if the plugin itself may not be the issue, something happened.

    Maybe it leaves snippets of code somewhere?

    / Stefan

    Plugin Author John Godley

    (@johnny5)

    Maybe it leaves snippets of code somewhere?

    It does not. If the plugin has been deleted it is not doing anything and does not leave anything behind. Your site may be cache, or it may be an unrelated problem.

    Thread Starter theillustrator

    (@theillustrator)

    Hi again,

    Unfortunately the problem persist even after deleting the plugin.

    I will use your plugin for a clients website that is not a online course website, but unfortunately it doesnt work even after eleting the plugin.

    Now had a respons email from Vimeo. Hope they can see whats the problem with their API and whatever it can be.

    It all worked before I installed your plugin. And it doesnt work now. And, well, maybe it had stopped working with vimeo vidoes anyway later on. Maybe Vimeos fault. Maybe LMS Plugin Learnpress upgrade of their plugin. I am lost.

    The sad part is, I whanted to implement this CSP to increase security, but it broke my embedded videos.

    No hard feelings, happy I donated 20 anyway. Its life. It is what it is.

    For reference here a temporary L, that I made for Vimeo to look at.
    canvas. nu/ onlinekurser/ temporary-page

    Best

    Stefan

    Thread Starter theillustrator

    (@theillustrator)

    Hi again,

    Here a follow-up.

    I got higher level support help from Vimeo, who found the culprit. A meta refferrer with a no-referrer wasnt removed after plugin deletion, I presume. And/or when I reinstalled the redirection plugin again it appeared. Vimoe support said to replace it with: content – origin, or just remove it.

    That gave me back Vimeo video player with password fields available again.

    I also found more CSP snippets that just doesnt work with Vimeo video player anyway, was when I made website settings from start again, in the redirection plugin. The one that doesn’t work, and messes upp the entire website layout, design, UI.

    Dont use: Content Security Policy: style – src ‘ self ’;

    I posted the source code in my brand new blog post. This forum moderators wont allow code – they never allowed mine. canvas .nu / blog

    Best regards and cheers as I sip more coffee, double espress, fresh grind
    Stefan L
    in Stockholm

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Problem with allowing Vimeo embedded videos’ is closed to new replies.

Tags