Page MenuHomePhabricator

EmbedVideo extension delivers youtube videos using http instead of https causing modern browsers to block the content
Closed, InvalidPublic

Description

Author: ttguy1

Description:
If you use the EmbedVideo extension to embed a youtube video eg {{#ev:youtube|dMH0bHeiRNg}} then the html created delivers the youtube content over http. If the wiki running the EmbedVideo extension is delivering content over https then the resulting page is detected by modern browsers as containing mixed content and the youtube embeded video is blocked.

Users can unblock the content but they might not know that they can do this. I did not know at first.

The solution would be for the extension to deliver the content from youtube over https - youtube can do this. I guess the extension should some how detect if the wiki is using http or https and send youtube data in the matching format.


Version: REL1_20-branch
Severity: normal
URL: https://userbase.kde.org/Kdenlive/Manual/Effects/Blur_and_hide/Auto_Mask

Details

Reference
bz69454

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 22 2014, 3:42 AM
bzimport set Reference to bz69454.
bzimport added a subscriber: Unknown Object (MLST).

ttguy1 wrote:

A comment at https://www.mediawiki.org/wiki/Extension_talk:EmbedVideo#HTTPS_support_with_embedded_youtube says this could be fixed:
It's pretty easy : simply modify EmbedVideo.Services.php to replace frame src "http://" by "https://" in youtube* php array.

https://www.mediawiki.org/wiki/Extension:EmbedVideo says this is not maintained anymore and hosted on Github, so the bug reports should probably be created at
https://github.com/Whiteknight/mediawiki-embedvideo/issues instead.

Ah, thanks for finding that. Looks like it should be handled there, hence closing the ticket in WIkimedia Bugzilla as it's not handled here