diff --git a/server/index.mjs b/server/index.mjs index 7578849..e293964 100644 --- a/server/index.mjs +++ b/server/index.mjs @@ -957,12 +957,6 @@ app.use(helmet({ crossOriginEmbedderPolicy: false, // Allow loading cross‑origin images crossOriginResourcePolicy: { policy: 'cross-origin' }, - // Dailymotion exige un Referer sur la page d'embed (sans lui, le player - // bloque la lecture). Le défaut helmet (`no-referrer`) coupait le Referer - // de toute la page : on envoie l'origine (recommandation Dailymotion - // "Referrer policy and Player embedding", valeur par défaut des navigateurs - // depuis 2021). Les iframes précisent déjà leur propre referrerpolicy. - referrerPolicy: { policy: 'strict-origin-when-cross-origin' }, })); app.use(express.json()); app.use(express.urlencoded({ extended: true })); diff --git a/src/components/shorts/watch-short.component.html b/src/components/shorts/watch-short.component.html index 4222fc5..6485f40 100644 --- a/src/components/shorts/watch-short.component.html +++ b/src/components/shorts/watch-short.component.html @@ -79,7 +79,7 @@ @if (embedUrl(); as url) { + allowfullscreen referrerpolicy="origin"> } @else if (loading()) {