Embedded Scene Player

Related


Screenshots

1 Like

It isn’t working for me.. I get a “This content is blocked. Contact the site owner to fix the issue.” messge. In console it says:

Refused to frame ‘https://www.youtube.com/’ because it violates the following Content Security Policy directive: “child-src ‘none’”. Note that ‘frame-src’ was not explicitly set, so ‘child-src’ is used as a fallback.

1 Like

Thanks for the report, added broken tag.

Is there a way to change the frame-src csp? Could this be included in the csps that can be set in the plugin yaml?

This will require a core change to allow modifying the CSPs. Unfortunately, I tested this in a dev environment running vite which didn’t have this permission issue.