From cd2a0b35036c648ea6b643558700dc88bfb0a529 Mon Sep 17 00:00:00 2001
From: Brad Simpson <brad.simpson@kineo.com>
Date: Tue, 7 Jul 2026 09:54:46 -0600
Subject: [PATCH] Fix Error 153 by setting referrerpolicy on the embed iframe

YouTube's client-identity policy requires the Referer header on
embed requests. Host pages that restrict their referrer policy
(e.g. same-origin) strip it, and YouTube rejects the embed with
Error 153. Setting referrerpolicy="strict-origin-when-cross-origin"
on the iframe overrides the document policy for that request only,
matching YouTube's own recommendation.

Fixes #51
---
 templates/youtube.hbs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/templates/youtube.hbs b/templates/youtube.hbs
index ad7ea60..fa5f5de 100644
--- a/templates/youtube.hbs
+++ b/templates/youtube.hbs
@@ -13,6 +13,7 @@
 
     {{#if _media._source}}
     <iframe width="640px" height="360px" style="width:100%;"
+      referrerpolicy="strict-origin-when-cross-origin"
       src="{{_media._source~}}
       ?&autoplay={{#if _media._autoplay}}1{{else}}0{{/if~}}
       &rel={{#if _media._showRelated}}1{{else}}0{{/if~}}