Repro steps:
The src property for the embedded iframe is /ajax/inset/iframe?id=youtube-video-KqpHTFJO4mE&start=0, which means that the iframe appears to be 1st-party.
However there is redirection server-side which causes the effective URL for the iframe to be https://www.youtube.com/embed/KqpHTFJO4mE?wmode=transparent&rel=0&autohide=1&enablejsapi=1&showinfo=0&start=0, which is properly blocked.
However the DOM element collapser uses the original src attribute to find out whether collapsing must take place, hence it fails to collapse the iframe which was blocked using redirected URL.
Repro steps:
The
srcproperty for the embeddediframeis/ajax/inset/iframe?id=youtube-video-KqpHTFJO4mE&start=0, which means that theiframeappears to be 1st-party.However there is redirection server-side which causes the effective URL for the
iframeto behttps://www.youtube.com/embed/KqpHTFJO4mE?wmode=transparent&rel=0&autohide=1&enablejsapi=1&showinfo=0&start=0, which is properly blocked.However the DOM element collapser uses the original
srcattribute to find out whether collapsing must take place, hence it fails to collapse theiframewhich was blocked using redirected URL.