YouTube now requires referrerpolicy="strict-origin-when-cross-origin" attribute on embedded video iframes for proper playback.
Thanks for reporting this, @J-Wick4. Great suggestion about YouTube now requires referrerpolicy="strict-origin-when-cross-origin" attribute on embedded video iframes for proper playback.! While this specific feature isn't yet in the core API, there are several ways to achieve similar behavior. Using the event system:...
Read full answer below ↓Question
GrapesJS version
- I confirm to use the latest version of GrapesJS
What browser are you using?
Brave
Reproducible demo link
na
Describe the bug
How to reproduce the bug?
- Try adding a YouTube video to a landing page and find out.
What is the expected behavior?
- YouTube video renders and is playable
What is the current behavior?
- YouTube produces and error and requires users to visit YouTube.com to watch video because of an extra requirement of a attribute in the iframe code.
Issue: YouTube now requires referrerpolicy="strict-origin-when-cross-origin" attribute on embedded video iframes for proper playback.
Changes needed in renderYoutube() and renderYoutubeNoCookie() methods:
Add: el.setAttribute('referrerpolicy', 'strict-origin-when-cross-origin');
After: el.setAttribute('allowfullscreen', 'true');
If it is necessary to execute some code to reproduce the bug, paste it below:
--- a/packages/core/src/dom_components/view/ComponentVideoView.ts
+++ b/packages/core/src/dom_components/view/ComponentVideoView.ts
@@ -105,6 +105,7 @@ export default class ComponentVideoView extends ComponentImageView<ComponentVide
el.src = this.model.getYoutubeSrc();
el.frameBorder = '0';
el.setAttribute('allowfullscreen', 'true');
+ el.setAttribute('referrerpolicy', 'strict-origin-when-cross-origin');
this.initVideoEl(el);
return el;
}
@@ -113,6 +114,7 @@ export default class ComponentVideoView extends ComponentImageView<ComponentVide
var el = document.createElement('iframe');
el.src = this.model.getYoutubeNoCookieSrc();
el.frameBorder = '0';
el.setAttribute('allowfullscreen', 'true');
+ el.setAttribute('referrerpolicy', 'strict-origin-when-cross-origin');
this.initVideoEl(el);
return el;
}
---
### Code of Conduct
- [x] I agree to follow this project's Code of ConductAnswers (1)
Thanks for reporting this, @J-Wick4.
Great suggestion about YouTube now requires referrerpolicy="strict-origin-when-cross-origin" attribute on embedded video iframes for proper playback.! While this specific feature isn't yet in the core API, there are several ways to achieve similar behavior.
Using the event system:
editor.on('component:update', (component) => {
// your logic here
});
Alternative approaches:
- Listen to
selector:addfor CSS selector changes - Use
selector:customfor custom rules - Tap into the
change:*events for fine-grained tracking - Build a plugin that extends the editor with this capability
Making it official: If this feature would benefit many users, consider opening a formal Feature Request on the GrapesJS repo with:
- A detailed use case
- Code example showing the desired behavior
- Why this matters for your workflow
The core team is receptive to well-motivated feature requests backed by real use cases.
Related Questions and Answers
Continue research with similar issue discussions.
Issue #6001
Layer manager breaks when alternating between pages
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? MS Edge 126.0.2592.87 (Official build) (ar...
Issue #6422
in dev branch when the preview is enabled dragging of components should not be allowed but it does.
GrapesJS version [x] I confirm to use the latest version of GrapesJS What browser are you using? chrome 133 with dev branch as of 02.27.202...
Issue #5563
The attributes of the script tags are being removed on the canvas.?
GrapesJS version[X] I confirm to use the latest version of GrapesJSWhat browser are you using? latest version of ChromeReproducible demo li...
Issue #5334
Selection of custom component type not working in the canvas
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? Chrome, Opera, Edge, etc Reproducible demo...
Paid Plugins That Match This Issue
Curated by issue keywords and label relevance to help you ship faster.
Loading paid plugin recommendations...
Check the open-source GrapesJS plugins on GitHub or run a quick search in our free catalog.
Browse free plugins →Premium plugins ship with support, regular updates, and production-ready features — save days of integration work.
Browse premium plugins →Related tutorials
In-depth guides on the same topic.
Tutorial
Find the Right GrapesJS Plugin in Seconds: Smarter Discovery Is Live
We're shipping a set of discovery upgrades. New label filters, a proper compatibility switch for GrapesJS vs Studio, one-click and a smarter sort bar.
Tutorial
GrapesJS vs Webflow vs Tilda: What to Choose for Your Business in 2026
Choosing the right website platform in 2026 is no longer just about building a site
Tutorial
GJS Market 2.0 - Donations, Tracking, Labels and Better Product Discovery
We’ve rolled out a new set of GrapesJS marketplace updates across GJS Market, focused on improving how creators distribute products
Browse Plugin Categories
Jump directly to plugin category pages on the marketplace.