It's blocked by CSP
this post was submitted on 06 Aug 2022
25 points (100.0% liked)
Lemmy
12544 readers
111 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS
What's CSP?
Content Security Policy, this defines which domains may be used from the main site domain, this blocks different kinds of attacks but has the effect that random domains cannot be embedded
So it can be solved by whitelisting known safe domains such as catbox.moe who provides sharing media and such!
that would be possible, it would require "trusted" embed sources, e.g. youtube or catbox or whatever. i know of another reddit type clone site which has their own official video host and pic host that allow embed but they block others
this would have to be the same on all instances for federated articles to work, so that would be a problem
content security policy
No.
idk why you'd want embeds anyway; those are unnecessary. Just link the video so that I can visit it.
I don't want to go (e.g.) YouTube to watch 4 advert before I can see the video. Embed is so muchier comfy and the site is more entertainable with the embedded video or social post, not only just a link.
I don't want to go (e.g.) YouTube to watch 4 advert before I can see the video.
Get a content blocker (like uBlock Origin); it's worth it.
Also, embeds still link the YouTube video, so adverts will still play in them.
Embed is so muchier comfy and the site is more entertainable with the embedded video or social post, not only just a link.
- Then make a plugin.
- Lemmy itself does not need to be "entertainable"; this is just the excuse capitalists make to profit off social addictions. Western social media started out efficient (UseNet and email); but gradually transformed into bloated social media (Reddit, Twitter, Facebook, Instagram, YouTube) as capitalist traits could fully manifest in better hardware.
- Voting was added solely because creates addiction cycles.
Social media should be modular (as in the UNIX philosophy).
Making sure Lemmy never takes off any%
Tell people they need to install an extension to make Lemmy usable
Making sure Lemmy never takes off any%
Email took off and it didn't have embeds.
Tell people they need to install an extension to make Lemmy usable
It is usable. Not everyone wants to have embedded videos, which is why I suggested making an extension.
Wow, ok.
it is a balance between security and usability, I assume it leans more towards security
i wonder if it would work to remove the CSP header with a header extension though
Idk but you could embed videos before the last update just like you can embed/add image files:
But doesn't seem to work anymore sadly.
embed YouTube, Streamable, Imgur Gfycat.
There aren't any benefits of it. It only increases resources usage and decreases privacy and security(as embedded sites can still track users because browser will send http request at that site while loading).
Instead pasting an embedded link somewhere in post or reply would be a better way to accomplish it.
Same opinion. We shouldn't copy or cater to convenience like capitalists do.
I'm also very excited about this feature
Do the videos show up for you here? (For me it's only unsupported media type but in principle it seems like markdown could work too)
It shows up with unsupported MIME. My device should be able to play MP4 videos, or at least attempt even if it's an unsupported codec.
nope, same on FF
I think I've seen one embedded video here
Where?