playvideos: improves Content-Security-Policy (CSP) compliance

[thican]

Improves situation for #1513.

I hope it can integrate milestone 0.14.0 (#2105).

[nodiscc]

While we're at it, couldn't we automate the download of https://code.jquery.com/jquery-3.7.1.min.js during frontend builds? Instead of vendoring a massive minified js file

[thican]

While we're at it, couldn't we automate the download of https://code.jquery.com/jquery-3.7.1.min.js during frontend builds? Instead of vendoring a massive minified js file

Good idea, just I am not aware on how to make it work (yet?) but I approve this.

[thican]

I guess the plugin could be rewritten to discard usage of jquery, nowadays, no? I am not a Web dev so I might be wrong ;-)
As far as I understand the code of this plugin (why is it so much obfuscated!?), it simplifies the creation of tag such as div and a with CSS content to only create the play box which hold the frame for the video host. I guess jQuery is not really required with modern browsers for just those capabilities, no?

However I am a bit lost with the frontend build usage, I managed to integrate jquery with the correct version and verified its fingerprints, but is it okay then I load the JS script from its path node_modules/jquery/dist/jquery.min.js?