From 8edac2b2125520f73d2a99ed0f5e83a2c95c513d Mon Sep 17 00:00:00 2001
From: Stefan Scheu <stefan.scheu@cando-image.com>
Date: Mon, 3 Nov 2025 15:06:12 +0100
Subject: [PATCH] fix: fixed youtube policy

---
 .../Resources/public/js/pimcore/asset/video.js     |  2 +-
 .../public/js/pimcore/object/tags/video.js         | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/asset/video.js b/bundles/AdminBundle/Resources/public/js/pimcore/asset/video.js
index 3c4f347b5f0..8f591cf9491 100644
--- a/bundles/AdminBundle/Resources/public/js/pimcore/asset/video.js
+++ b/bundles/AdminBundle/Resources/public/js/pimcore/asset/video.js
@@ -319,7 +319,7 @@ pimcore.asset.video = Class.create(pimcore.asset.asset, {
 
     initPreviewVideo: function () {
         var frameUrl = Routing.generate('pimcore_admin_asset_getpreviewvideo', {id: this.id});
-        var html = '<iframe src="' + frameUrl + '" frameborder="0" id="' + this.previewFrameId + '" name="' + this.previewFrameId + '" style="width:100%;"></iframe>';
+        var html = '<iframe src="' + frameUrl + '"  referrerpolicy="strict-origin-when-cross-origin" frameborder="0" id="' + this.previewFrameId + '" name="' + this.previewFrameId + '" style="width:100%;"></iframe>';
         this.previewPanel.update(html);
 
         Ext.get(this.previewFrameId).setStyle({
diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/object/tags/video.js b/bundles/AdminBundle/Resources/public/js/pimcore/object/tags/video.js
index 3e1f56dcd03..e19ed00baae 100644
--- a/bundles/AdminBundle/Resources/public/js/pimcore/object/tags/video.js
+++ b/bundles/AdminBundle/Resources/public/js/pimcore/object/tags/video.js
@@ -190,18 +190,18 @@ pimcore.object.tags.video = Class.create(pimcore.object.tags.abstract, {
 
         if (this.data.type == "asset" && pimcore.settings.videoconverter) {
             var path = Routing.generate('pimcore_admin_asset_getvideothumbnail', {
-                    path: this.data.data,
-                    width: width,
-                    height: height,
-                    frame: true
-                });
+                path: this.data.data,
+                width: width,
+                height: height,
+                frame: true
+            });
 
             content = '<img src="'+path+'" />';
         } else if (this.data.type == "youtube") {
             if (this.data.data.indexOf('PL') === 0) {
-                content = '<iframe width="' + width + '" height="' + height + '" src="https://www.youtube-nocookie.com/embed/videoseries?list=' + this.data.data + '" frameborder="0" allowfullscreen></iframe>';
+                content = '<iframe width="' + width + '" referrerpolicy="strict-origin-when-cross-origin" height="' + height + '" src="https://www.youtube-nocookie.com/embed/videoseries?list=' + this.data.data + '" frameborder="0" allowfullscreen></iframe>';
             } else {
-                content = '<iframe width="' + width + '" height="' + height + '" src="https://www.youtube-nocookie.com/embed/' + this.data.data + '" frameborder="0" allowfullscreen></iframe>';
+                content = '<iframe width="' + width + '" referrerpolicy="strict-origin-when-cross-origin" height="' + height + '" src="https://www.youtube-nocookie.com/embed/' + this.data.data + '" frameborder="0" allowfullscreen></iframe>';
             }
         } else if (this.data.type == "vimeo") {
             content = '<iframe src="https://player.vimeo.com/video/' + this.data.data + '?title=0&amp;byline=0&amp;portrait=0" width="' + width + '" height="' + height + '" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe>';