Set explicit `referrerpolicy` for Vimeo embeds
authorSascha Greuel <github@1-2.dev>
Mon, 25 Apr 2022 10:32:11 +0000 (12:32 +0200)
committerTim Düsterhus <duesterhus@woltlab.com>
Mon, 25 Apr 2022 10:51:38 +0000 (12:51 +0200)
see 936c0f6d5d3f5a811110f7add4fa688a3e9a8377
see https://www.woltlab.com/community/thread/295351/?postID=1891462#post1891462
Resolves #4755

com.woltlab.wcf/mediaProvider.xml

index a1048da2ca3001fe77b6f3d1a0e06d63c101e092..2c4b9993afea17618392e9f15c7d184f73ea2770 100644 (file)
@@ -16,7 +16,7 @@ https?://(?:.+?\.)?youtube.com/shorts/(?P<ID>[a-zA-Z0-9_-]+)]]></regex>
                        <title>Vimeo</title>
                        <regex><![CDATA[https?://vimeo\.com/(?:channels/[^/]+/)?(?P<ID>\d+)/?(?P<hash>(?(?<=/)[a-zA-Z0-9]+|))
 https?://vimeo\.com/groups/[^/]+/videos/(?P<ID>\d+)/?(?P<hash>(?(?<=/)[a-zA-Z0-9]+|))]]></regex>
-                       <html><![CDATA[<div class="messageVideoContainer"><iframe src="https://player.vimeo.com/video/{$ID}?h={$hash}" width="640" height="360" allowfullscreen></iframe></div>]]></html>
+                       <html><![CDATA[<div class="messageVideoContainer"><iframe src="https://player.vimeo.com/video/{$ID}?h={$hash}" width="640" height="360" referrerpolicy="strict-origin" allowfullscreen></iframe></div>]]></html>
                </provider>
                <provider name="dailymotion">
                        <title>Dailymotion</title>