| Summary | Detects embed URLs for file-less scenes and shows them in the scene player. | |
| Repository | https://github.com/WithoutPants/stash-plugin-prototypes/tree/main/plugins/embeddedScenePlayer | |
| Source URL | https://withoutpants.github.io/stash-plugin-prototypes/main/index.yml | |
| Install | How to install a plugin? |
2 Likes
It isn’t working for me.. I get a “This content is blocked. Contact the site owner to fix the issue.” messge. In console it says:
Refused to frame ‘https://www.youtube.com/’ because it violates the following Content Security Policy directive: “child-src ‘none’”. Note that ‘frame-src’ was not explicitly set, so ‘child-src’ is used as a fallback.
1 Like
Thanks for the report, added broken tag.
Is there a way to change the frame-src csp? Could this be included in the csps that can be set in the plugin yaml?
This will require a core change to allow modifying the CSPs. Unfortunately, I tested this in a dev environment running vite which didn’t have this permission issue.

