2bb8ac17c6
For videos from ``www.youtube.com`` this patch adds ``referrerpolicy`` and other by YT required permission policies for the iframe. API Clients that use the YouTube embedded player (including the YouTube IFrame Player API) must provide identification through the HTTP ``Referer`` request header[1]. If the error still occurs, check if server headers (e.g., in .htaccess or Nginx) are overriding the referrer policy[2]. [1] https://developers.google.com/youtube/terms/required-minimum-functionality#embedded-player-api-client-identity [2] hint comes from AI: https://chat.mistral.ai [3] https://developers.google.com/youtube/player_parameters Close: https://github.com/searxng/searxng/issues/5844 Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
29 lines
1.1 KiB
HTML
29 lines
1.1 KiB
HTML
{% from 'simple/macros.html' import result_header, result_sub_header, result_sub_footer, result_footer with context %}
|
|
|
|
{{ result_header(result, favicons, image_proxify) }}
|
|
{{ result_sub_header(result) }}
|
|
{% if result.iframe_src -%}
|
|
<p class="altlink"> <a class="btn-collapse collapsed media-loader disabled_if_nojs" data-target="#result-video-{{ index }}" data-btn-text-collapsed="{{ _('show video') }}" data-btn-text-not-collapsed="{{ _('hide video') }}">{{ icon_small('film') }} {{ _('show video') }}</a></p>
|
|
{%- endif %}
|
|
{%- if result.content %}
|
|
<p class="content">
|
|
{{ result.content|safe }}
|
|
</p>
|
|
{%- else %}
|
|
<p class="content empty_element">
|
|
{{ _('This site did not provide any description.')|safe }}
|
|
</p>
|
|
{% endif -%}
|
|
</p>
|
|
{{- result_sub_footer(result) -}}
|
|
{% if result.iframe_src -%}
|
|
<div id="result-video-{{ index }}" class="embedded-video invisible">
|
|
<iframe data-src="{{result.iframe_src}}" frameborder="0" allowfullscreen
|
|
{% if result.parsed_url.hostname in ("www.youtube.com", ) -%}
|
|
allow="picture-in-picture" referrerpolicy="origin">
|
|
{%- endif -%}
|
|
</iframe>
|
|
</div>
|
|
{%- endif %}
|
|
{{ result_footer(result) }}
|