Return-Path: <issues-return-66885-archive-asf-public=cust-asf.ponee.io@cordova.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id D5BF6200ABD
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Sat, 14 May 2016 12:15:14 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id CA5CB160A1A; Sat, 14 May 2016 10:15:14 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id 1A219160131
	for <archive-asf-public@cust-asf.ponee.io>; Sat, 14 May 2016 12:15:13 +0200 (CEST)
Received: (qmail 71710 invoked by uid 500); 14 May 2016 10:15:13 -0000
Mailing-List: contact issues-help@cordova.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cordova.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cordova.apache.org>
List-Post: <mailto:issues@cordova.apache.org>
List-Id: <issues.cordova.apache.org>
Delivered-To: mailing list issues@cordova.apache.org
Received: (qmail 71686 invoked by uid 99); 14 May 2016 10:15:13 -0000
Received: from arcas.apache.org (HELO arcas) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 14 May 2016 10:15:13 +0000
Received: from arcas.apache.org (localhost [127.0.0.1])
	by arcas (Postfix) with ESMTP id 0C2D02C1F5D
	for <issues@cordova.apache.org>; Sat, 14 May 2016 10:15:13 +0000 (UTC)
Date: Sat, 14 May 2016 10:15:13 +0000 (UTC)
From: "Daniel Rossi (JIRA)" <jira@apache.org>
To: issues@cordova.apache.org
Message-ID: <JIRA.12956378.1459915599000.190423.1463220913046@Atlassian.JIRA>
In-Reply-To: <JIRA.12956378.1459915599000@Atlassian.JIRA>
References: <JIRA.12956378.1459915599000@Atlassian.JIRA> <JIRA.12956378.1459915599606@arcas>
Subject: [jira] [Commented] (CB-11025) YouTube API failing on iOS
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
archived-at: Sat, 14 May 2016 10:15:15 -0000


    [ https://issues.apache.org/jira/browse/CB-11025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15283514#comment-15283514 ] 

Daniel Rossi commented on CB-11025:
-----------------------------------

Hi guys. In cordova it adds a default content security tag. Safari lacks the new "child-src" option that is where it was broken. frame-src seems to override the default-src so it breaks the gap:// iframe. 

You need something like this so add the youtube url into the default-src.

<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com https://www.youtube.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *;  script-src 'self' 'unsafe-eval' https://yourdomain.com https://www.youtube.com https://s.ytimg.com; img-src 'self' https://i.ytimg.com;">

It is working for me especially with the inline options

  <preference name="AllowInlineMediaPlayback" value="true"/>
  <preference name="MediaPlaybackRequiresUserAction" value="false"/>
  <preference name="MediaPlaybackAllowsAirPlay" value="true"/>

> YouTube API failing on iOS
> --------------------------
>
>                 Key: CB-11025
>                 URL: https://issues.apache.org/jira/browse/CB-11025
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>    Affects Versions: 6.0.0
>            Reporter: Andrew Busch
>              Labels: triaged
>
> When I inject a YouTube {{<iframe>}} and absorb it with a YT.Player object, the YouTube video does not load and I get the following message in the browser JavaScript console:
> {{Unable to post message to https://www.youtube.com. Recipient has origin file://.}}
> I've tried the exact same code with Cordova 5.4.1 and it works, but fails for both 6.0.0 and 6.1.1. Issue is restricted to iOS.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org