Update embed youtube markup (#1462)

* Update embed youtube player * Add SECURE_REFERRER_POLICY to dev settings, bump version to dev2
rafalp · Mar 10, 2023 · e57b6b4 · e57b6b4
1 parent 9e8353e
commit e57b6b4
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 7 deletions.
diff --git a/devproject/settings.py b/devproject/settings.py
@@ -238,6 +238,8 @@
 
 ROOT_URLCONF = "devproject.urls"
 
+SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin"
+
 SOCIAL_AUTH_STRATEGY = "misago.socialauth.strategy.MisagoStrategy"
 
 SOCIAL_AUTH_PIPELINE = (

diff --git a/frontend/src/services/one-box.js b/frontend/src/services/one-box.js
@@ -43,15 +43,16 @@ export class OneBox {
   swapYoutubePlayer(element, youtube) {
     let url = "https://www.youtube.com/embed/"
     url += youtube.video
-    url += "?rel=0"
+    url += "?feature=oembed"
     if (youtube.start) {
       url += "&start=" + youtube.start
     }
 
     const player = $(
-      '<iframe class="embed-responsive-item" src="' +
-        url +
-        '" allowfullscreen></iframe>'
+      '<iframe class="embed-responsive-item" frameborder="0" ' +
+      'src="' + url + '" ' +
+      'allow="encrypted-media; gyroscope; picture-in-picture" ' +
+      'allowfullscreen></iframe>'
     )
     $(element).replaceWith(player)
     player.wrap('<div class="embed-responsive embed-responsive-16by9"></div>')

diff --git a/misago/__init__.py b/misago/__init__.py
@@ -1,5 +1,5 @@
 from .plugins.pluginlist import load_plugin_list_if_exists
 
 
-__version__ = "0.30.0.dev1"
+__version__ = "0.30.0.dev2"
 __released__ = False
diff --git a/misago/static/misago/js/misago.js b/misago/static/misago/js/misago.js
diff --git a/misago/static/misago/js/misago.js.map b/misago/static/misago/js/misago.js.map