Chrome throws an error "ERR_BLOCKED_BY_XSS_AUDITOR" when you try to Preview a node that has a Youtube embed in the node body. Steps to reproduce.

  1. Install a Drupal 7 site on simplytest.me
  2. Create a node, set the text format to Full HTML
  3. Set the body to <iframe width="560" height="315" src="https://www.youtube.com/embed/dQw4w9WgXcQ" frameborder="0" allowfullscreen></iframe>
  4. Click the Preview button

err_blocked_by_xss_auditor

CommentFileSizeAuthor
#3 chrome-error.gif3.98 MBmstrelan
err_blocked_by_xss_auditor.jpg20.15 KBmstrelan

Comments

mstrelan created an issue. See original summary.

pr1859’s picture

pr1859 commented
Category: Bug report » Support request
Status: Active » Fixed

cannot replicate the issue with steps provided

mstrelan’s picture

mstrelan commented
Status: Fixed » Active
StatusFileSize
new chrome-error.gif3.98 MB

cannot replicate the issue with steps provided

Really? See attached screencast.

chrome error screencast

pr1859’s picture

pr1859 commented

I was able to save the node successfully.

Preview of node when iframe tag added in body throws an xss error -- this was the case only in Google Chrome, not in Firefox.

I was successfully able to preview in Mozilla Firefox

mstrelan’s picture

mstrelan commented
Status: Active » Closed (outdated)

Tested in Drupal 7.84 with Chrome 94 and can no longer reproduce.