Add YouTube-nocookie to youTube filtered URLs and make it a config setting
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Triaged
|
Wishlist
|
Unassigned |
Bug Description
Google automatically tracks anyone viewing an embedded a YouTube video. There is a solution to be GDPR compliant: It's to use youtube-
See https:/
It would be good to include that URL as default in our 'Allowed iframe sources' list.
Furthermore, since we want to be GDPR compliant / need to in certain circumstances, I wonder if we should make it a default in the config.php that system admins can say that all YouTube videos should be converted to the nocookie URL (would need to be regular YouTube URLs as well as ones from mobile devices and the YouTube shortened ones I guess). We already convert the URL into proper iframe code and could add that as regex.
It would be good to have it available in the site admin area but also be able to override it in the config.php so that site admins can't easily change things. The default would be nocookie to comply better with privacy from the start.
We may need to have a button to update all URLs (like we have for clean URLs when they are set for the first time) if we can't make that conversion on the fly. YouTube URLs appear in the 'Embedded media' block as well as in serialised text in journal entries, text blocks, and notes. That serialised text might be difficult to change. This is important for sites that would be switching from the regular to the nocookie URL.
If we make it a setting and someone changes from nocookie URL to regular YouTube URL then we are not updating all URLs though in case someone had set the nocookie URL specifically. The update would only be for YouTube -> YouTube-nocookie.
Changed in mahara: | |
milestone: | none → 21.04.0 |
Changed in mahara: | |
assignee: | nobody → Lisa Seeto (lisaseeto) |
status: | Confirmed → In Progress |
Changed in mahara: | |
status: | In Progress → Triaged |
milestone: | 21.04.0 → none |
Changed in mahara: | |
assignee: | Lisa Seeto (lisaseeto) → nobody |
After offline discussion, we will adjust the way that future YouTube links are created at the block level. An upgrade step will be added to alter existing URLs to use the no-cookie address.