# Streamable videos onebox are broken

**URL:** <https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498>\
**Category:** Support\
**Created:** [September 21, 2017, 11:07am UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498 "2017-09-21T11:07:43Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![hnaseri](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hnaseri/32/120660_2.png) [@hnaseri](https://meta.discourse.org/u/hnaseri)\
**Post date:** [September 21, 2017, 11:07am UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/1 "2017-09-21T11:07:43Z")

</div>

Recently, when I share streamable videos as onebox, They don’t show at all. while the link is ok.

[https://try.discourse.org/t/testing-streamable-videos/825](https://try.discourse.org/t/testing-streamable-videos/825)

```
https://streamable.com/iqph4

```

Any idea?

---

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [September 21, 2017, 12:21pm UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/2 "2017-09-21T12:21:58Z")

</div>

This doesn’t look like a Discourse bug: Streamable returns a `403`, so they refuse to send the video for some reason. I’d guess that this is an issue on their side.

Possibly related:

[https://meta.discourse.org/t/onebox-is-broken-for-some-old-links/70193?u=fefrei](https://meta.discourse.org/t/onebox-is-broken-for-some-old-links/70193)

---

<div class="post-metadata">

**Author:** ![chapel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chapel/32/122414_2.png) [@chapel](https://meta.discourse.org/u/chapel)\
**Post date:** [September 27, 2017, 5:36am UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/3 "2017-09-27T05:36:08Z")

</div>

Actually looking into it a bit more, streamable appears to be blocking embedding. The links to the video files work if loading them directly in a new tab, but if a referer header is sent it will give a 403.

You can verify this yourself by copying the network request in chrome dev tools network tab as a curl command. As the straight request it will return a 403 but if you remove the referer header it will succeed by sending the binary data.

Embedly actually handles it by embedding it within an iframe. If you go to the streamable link you can copy the embed code which provides a link that is embeddable.

```plaintext
<div style="width: 100%; height: 0px; position: relative; padding-bottom: 62.500%;">
  <iframe
    src="https://streamable.com/s/xxxx"
    frameborder="0" width="100%" height="100%" allowfullscreen style="width: 100%; height: 100%; position: absolute;"
  ></iframe>
</div>

```

I would say that onebox needs to be updated to handle streamable as an iframe with the correct url structure like so.

---

<div class="post-metadata">

**Author:** ![Sailsman63](https://avatars.discourse-cdn.com/v4/letter/s/b5ac83/32.png) [@Sailsman63](https://meta.discourse.org/u/Sailsman63)\
**Post date:** [October 23, 2018, 12:52am UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/4 "2018-10-23T00:52:20Z")

</div>

Has anyone tried modding the oneboxer to use the expanded URL? Not sure that it would need to use an i-frame at all, but its the full video + player.

---

<div class="post-metadata">

**Author:** ![WaitroseCarpark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/waitrosecarpark/32/198599_2.png) [@WaitroseCarpark](https://meta.discourse.org/u/WaitroseCarpark)\
**Post date:** [August 14, 2019, 6:13am UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/5 "2019-08-14T06:13:21Z")

</div>

Currently experiencing this issue over the last 3-4 days with [streamable.com](http://streamable.com). Anyone else manage to fix this?

---

<div class="post-metadata">

**Author:** ![sunjam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sunjam/32/175682_2.png) [@sunjam](https://meta.discourse.org/u/sunjam)\
**Post date:** [June 18, 2020, 3:27pm UTC](https://meta.discourse.org/t/streamable-videos-onebox-are-broken/70498/6 "2020-06-18T15:27:35Z")

</div>

Streamable is not working for us on beta6 of tests-pass. Is it possible to resolve this by adjusting CSP? Tried applying @chapel’s fix unsuccessfully. Thanks.
