You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The embedded Youtube video at the top of the article is properly blocked, but the corresponding DOM element is not collapsed.
The src property for the embedded iframe is /ajax/inset/iframe?id=youtube-video-KqpHTFJO4mE&start=0, which means that the iframe appears to be 1st-party.
However there is redirection server-side which causes the effective URL for the iframe to be https://www.youtube.com/embed/KqpHTFJO4mE?wmode=transparent&rel=0&autohide=1&enablejsapi=1&showinfo=0&start=0, which is properly blocked.
However the DOM element collapser uses the original src attribute to find out whether collapsing must take place, hence it fails to collapse the iframe which was blocked using redirected URL.
The text was updated successfully, but these errors were encountered:
Repro steps:
The
src
property for the embeddediframe
is/ajax/inset/iframe?id=youtube-video-KqpHTFJO4mE&start=0
, which means that theiframe
appears to be 1st-party.However there is redirection server-side which causes the effective URL for the
iframe
to behttps://www.youtube.com/embed/KqpHTFJO4mE?wmode=transparent&rel=0&autohide=1&enablejsapi=1&showinfo=0&start=0
, which is properly blocked.However the DOM element collapser uses the original
src
attribute to find out whether collapsing must take place, hence it fails to collapse theiframe
which was blocked using redirected URL.The text was updated successfully, but these errors were encountered: