Cloudron+LAMP: Tiktok Embed problems

[robi]

@girish said in Cloudron+LAMP: Tiktok Embed problems:

track

Blocked by default in Vivaldi.

[timconsidine]

@squareclouds said in Cloudron+LAMP: Tiktok Embed problems:

thats why i am here. at some point I didnt know what to test anymore

After the extensive amount of discussion in this thread, if you haven't solved it and you still want help from the community, maybe you should share the URL of the site running on Cloudron.

Forum posts get indexed by search engines, so probably share a temporary alias which gets removed later.

Also I think I read you don't have the non-Cloudron site running. If that's correct, may I suggest you get one running again for the point of comparison, and of course share its URL (or rather an alias if needed).

Otherwise people trying to help are just guessing.

[girish]

@squareclouds I replied now. But the site you sent me (which I think you said is hosted externally?) doesn't work either. It has the same errors. Sent you a screenshot.

[squareclouds]

@timconsidine thats why @girish asked me already to send the link to the cloudron support email after i already posted it here and he removed it, since i said technically i am not allowed (signed non-disclosure agreement) to be showing it yet. so for now i will wait for his response and thank you all for your guesses.

[squareclouds]

@girish ah thank you, didnt see it while i was wirting. and sorry i misunderstood your request, i just sent you the other link.

[girish]

Alright, found the problem. By default, we set the Referrer-Policy as same-origin (see also https://forum.cloudron.io/topic/4546/referrer-policy-header-is-overwritten) . On safari alone, having this header makes TikTok videos not play. Changing it to unsafe-url makes it work.

@squareclouds An app can change this header. In the LAMP app, edit the apache/app.conf . Add a line Header set Referrer-Policy "unsafe-url" and restart the app. That seems to make it work. Can you confirm?

See also:

• https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#referrer-policy
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

[girish]

I have to add that maybe strict-origin-when-cross-origin is a better value and maybe other values make it work as well. So, might be worth testing what works best for your site. Unfortunately, I lost access to the Mac by now.

[squareclouds]

@girish said in Cloudron+LAMP: Tiktok Embed problems:

Header set Referrer-Policy "unsafe-url"

thank you! i am trying it right now from the web terminal but it says app.conf is not writeable.

• i opened the app terminal
• went to app/code/apache
• opened the app.conf with nano
• made the change
• but i cannot save

do i have to stop the app and use ssh?

Bildschirm­foto 2023-04-28 um 11.17.04.png

[girish]

@squareclouds said in Cloudron+LAMP: Tiktok Embed problems:

went to app/code/apache

It's in /app/data/apache . You can use the Filemanager . Code is always readonly in Cloudron.

[squareclouds]

@girish it works with both values!!!! thank you so much for your help and patience, girish! i will leave it as 'strict-origin-when-cross-origin'