• Resolved Anas Hannoun (anas-ha)

    (@anashannoun)


    Hi there,

    We’ve been happily using CACSP for a couple of weeks now without running into any real issues, until now.
    We use Elementor for some of our websites. When having a video block to embed a YouTube video for example, we can’t get the CACSP iframe block message to show if user hasn’t accepted the experience/functional cookies. The issue seems to be related to how and when Elementor loads its embedded video’s (through JS) and when CACSP blocks the script.

    The message does appear when we embed YouTube video using good old html-block with <iframe> instead of the Elementor video-block, but on a website that has dozens of these, this isn’t a workable solution for us.

    We’ve checked the CACSP and Elementor settings for a different solution, but sadly couldn’t find one. Do you have any suggestions?

    The page I need help with: [log in to see the link]

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author Johan Jonk Stenström

    (@jonkastonka)

    You should add https://www.youtube.com/ to your scripts.

    Thread Starter Anas Hannoun (anas-ha)

    (@anashannoun)

    Hi @jonkastonka,

    Thank you for the time and effort.

    I’m not sure to which section do you mean by add https://www.youtube.com/ to my scripts, it’s already added.

    Here’s how my settings look like:

    Cheers,

    Anas

    Plugin Author Johan Jonk Stenström

    (@jonkastonka)

    I mean a section called Script, I’d add it under Experience.

    Thread Starter Anas Hannoun (anas-ha)

    (@anashannoun)

    Hi there @jonkastonka ,

    Thank you again for taking the time to help out. Much appreciated.

    Well, that’s the problem, it’s added but the overlay with the “Review your settings text” and “Review your settings button” is not showing

    Here’s how my Settings > Domains look like:

    https://imgur.com/PaHJ8eD

    And here’s how our options look like:

    cacsp_version	2.29
    cacsp_option_actived true
    cacsp_option_active 1

    cacsp_option_statistics_scripts https://google-analytics.com/
    https://*.google-analytics.com/
    https://googletagmanager.com/
    https://*.googletagmanager.com/

    cacsp_option_statistics_images https://google-analytics.com/
    https://*.google-analytics.com/

    cacsp_option_markerting_scripts https://googletagmanager.com/
    https://*.googletagmanager.com/
    https://tagmanager.google.com/

    cacsp_option_markerting_images https://googletagmanager.com/
    https://*.googletagmanager.com/
    https://tagmanager.google.com/
    https://gstatic.com/
    https://*.gstatic.com/

    cacsp_option_experience_images https://secure.gravatar.com/
    https://*.ytimg.com/
    https://*.cdninstagram.com/
    https://maps.gstatic.com/
    https://maps.google.com/
    https://maps.googleapis.com/

    cacsp_option_always_scripts
    cacsp_option_always_images
    cacsp_option_always_frames
    cacsp_option_statistics_frames

    cacsp_option_experience_scripts https://www.youtube.com/
    https://www.recaptcha.net/
    https://www.gstatic.com/
    https://www.google.com/
    https://maps.googleapis.com/
    https://maps.google.com/
    https://youtube.com/
    https://*.youtube.com/

    cacsp_option_experience_frames https://youtube.com/
    https://*.youtube.com/
    https://youtube-nocookie.com/
    https://*.youtube-nocookie.com/
    https://youtu.be/
    https://www.youtube.com/
    https://*.vimeo.com/
    https://www.google.com/
    https://maps.google.com/

    cacsp_option_markerting_frames

    cacsp_option_text_header Cookies
    cacsp_option_text_info We serveren cookies. als je dat goed vindt, klik dan op \"Alles accepteren\". je kunt ook kiezen wat voor soort cookies je wil door op \"Instellingen\" te klikken.
    cacsp_option_text_link_text Lees ons cookie beleid
    cacsp_option_text_settings Kies wat voor soort cookies je wil accepteren. Je keuze wordt een jaar lang bewaard.
    cacsp_option_text_always_allow_header Noodzakelijk
    cacsp_option_text_always_allow_description Deze cookies zijn niet optioneel. Ze zijn nodig voor de site om te functioneren.
    cacsp_option_text_statistics_header Statistieken
    cacsp_option_text_statistics_description Zodat wij de functionaliteit en structuur van de site kunnen verbeteren op basis van het gebruik van de site.
    cacsp_option_text_experience_header Ervaring
    cacsp_option_text_experience_description Om onze site zo goed mogelijk te laten functioneren tijdens je bezoek. Als je deze cookies weigert, zal bepaalde functionaliteit van de site verdwijnen.
    cacsp_option_text_marketing_header Marketing
    cacsp_option_text_marketing_description Door je interesses en gedrag te delen als je onze site bezoekt, vergroot je de kans dat je gepersonaliseerde inhoud en aanbiedingen te zien krijgt.
    cacsp_option_settings_button Instellingen
    cacsp_option_refuse_button Weiger alle
    cacsp_option_accept_all_button Alles accepteren
    cacsp_option_save_button Opslaan
    cacsp_option_text_close Sluiten
    cacsp_review_settings_description Je instellingen kunnen voorkomen dat je deze inhoud ziet. Waarschijnlijk heb je ervaring uitgeschakeld.
    cacsp_review_settings_button Je instellingen herzien
    cacsp_not_allowed_description De inhoud kan niet worden geladen, omdat het niet is toegestaan op de site.
    cacsp_not_allowed_button Neem contact op met de beheerder
    save_cacsp_settings_texts Instellingen opslaan
    cacsp_option_only_csp 0
    cacsp_option_own_style 0
    cacsp_option_own_js 0
    cacsp_option_banner 0
    cacsp_option_allow_use_site 0
    cacsp_option_grandma 0
    cacsp_option_hide_unused_settings_row 0
    cacsp_option_show_refuse_button 1
    cacsp_option_settings_close_button 0
    cacsp_option_settings_save_consent 1
    cacsp_option_forms 0
    cacsp_option_worker 0
    cacsp_option_blob 1
    cacsp_option_disable_unsafe_inline 0
    cacsp_option_disable_unsafe_eval 0
    cacsp_option_disable_content_not_allowed_message 0
    cacsp_option_meta 0
    cacsp_option_debug 0
    cacsp_option_no_x_csp 0
    cacsp_option_settings_policy_link 0
    cacsp_option_settings_policy_link_url
    cacsp_option_settings_policy_link_target 0
    cacsp_option_settings_admin_email 0
    cacsp_option_wpengine_compatibility_mode 0
    cacsp_option_google_consent_mode 1
    cacsp_option_settings_expire 365
    cacsp_option_settings_timeout 1000
    cacsp_option_bypass_ip 0
    cacsp_option_bypass_ips
    cacsp_db_version 2.29
    Plugin Author Johan Jonk Stenström

    (@jonkastonka)

    I took a look on your site and all the YouTube videos are loading.

    Thread Starter Anas Hannoun (anas-ha)

    (@anashannoun)

    @jonkastonka That’s a bit weird, would you take a look now, please?

    https://imgur.com/a/j5nr0jG

    Plugin Author Johan Jonk Stenström

    (@jonkastonka)

    Now they are not showing, and I get this error in the console.

    Content-Security-Policy: The page’s settings blocked a script (script-src-elem) at https://www.youtube.com/iframe_api from being executed because it violates the following directive: “script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:”
    Plugin Author Johan Jonk Stenström

    (@jonkastonka)

    Are you perhaps using some sort of cache plugin that could be creating these problems?

    If so, read here: I’m using a cache plugin, and it seems to be interfere with this plugin in the FAQ.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Elementor compatibility’ is closed to new replies.