Bug on streaming youtube (HEADERS)

We get this error in all meetings !
It seems there is an error beetween zoom and google !

@Carson_Chen seems a header Content-Security-Policy on the server side !!!

PLEASE FIX THIS ASAP !

:o

Refused to load the script ‘https://apis.google.com/js/platform.js’
because it violates the following Content Security Policy directive: “script-src ‘unsafe-eval’ ‘unsafe-inline’ blob: about:
https://ruanshi2.8686c.com https://ajax.aspnetcdn.com/ajax/3.5/MicrosoftAjax.js https://appsforoffice.microsoft.com https://assets.zendesk.com https://autocomplete.demandbase.com https://cdn.wootric.com https://cdncache-a.akamaihd.net https://connect.facebook.net https://consent.trustarc.com https://d.adroll.mgr.consensu.org https://d2b9h3rz4xo53c.cloudfront.net https://d24cgw3uvb9a9h.cloudfront.net https://googleads.g.doubleclick.net https://pi.pardot.com https://s.dcbap.com https://s.ytimg.com https://s3.amazonaws.com https://scout-cdn.salesloft.com https://sealserver.trustwave.com https://secure-cdn.mplxtms.com https://serve2.cheqzone.com https://snap.licdn.com https://sp.analytics.yahoo.com https://static.zdassets.com https://static2.sharepointonline.com https://tag.demandbase.com https://tpc.googlesyndication.com https://tracking.g2crowd.com https://trk.techtarget.com https://www.comeet.co https://www.dropbox.com https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/recaptcha/releases/ https://google.com https://docs.google.com https://cse.google.com https://maps.google.com https://www.google.com https://linkedin.com https://platform.linkedin.com https://px.ads.linkedin.com https://ads.linkedin.com https://www.youtube.com https://d17o6on0vd932d.cloudfront.net https:// .ada.support https:// .adroll.com https:// .hotjar.com https:// .zoom.us https:// .zoomcloudpbx.com https:// .zoomus.cn https://*.zopim.com https://adroll.com https://zoom.us ‘self’”.
Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.

Today it seems ok to me! That work again Thanks

1 Like

Happy to hear it is working now! :slight_smile:

Let us know if you see the issue again.

Thanks,
Tommy