From a3db74c7f7ba88128af307e18678662435d5bb6f Mon Sep 17 00:00:00 2001
From: Jannis Braun <151788261+TheZwiss@users.noreply.github.com>
Date: Sat, 21 Mar 2026 00:26:32 +0100
Subject: [PATCH] fix: resolve YouTube Error 153 by adding origin param and
 removing no-referrer

YouTube's embed API requires knowing the embedding origin to authorize
playback. The referrerPolicy="no-referrer" was stripping the Referer
header, and the missing origin param meant youtube-nocookie.com couldn't
verify the embed source, causing Error 153 (video player configuration
error). Fix: pass origin param explicitly and let the browser send the
default referrer.
---
 packages/web/src/components/chat/embeds/VideoEmbed.tsx | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/packages/web/src/components/chat/embeds/VideoEmbed.tsx b/packages/web/src/components/chat/embeds/VideoEmbed.tsx
index 32834ee1..990b454a 100644
--- a/packages/web/src/components/chat/embeds/VideoEmbed.tsx
+++ b/packages/web/src/components/chat/embeds/VideoEmbed.tsx
@@ -34,11 +34,10 @@ export function VideoEmbed({ embed }: VideoEmbedProps) {
         {isPlaying && embed.embedUrl ? (
           <iframe
             className="absolute inset-0 w-full h-full"
-            src={`${embed.embedUrl}?autoplay=1`}
+            src={`${embed.embedUrl}?autoplay=1&origin=${encodeURIComponent(window.location.origin)}`}
             title={embed.title ?? 'Video'}
             allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
             allowFullScreen
-            referrerPolicy="no-referrer"
           />
         ) : (
           <button