Refused to frame 'https://embed.twitch.tv/' because an ancestor violates the following Content Security Policy directive

Running into the same issue here. Embed code worked fine up until a day or two ago. But now player/iframe will not load, with console debug showing something along the lines of (using Safari as example):

“Refused to load [playerurl] because it does not appear in the frame-ancestors directive of the Content Security Policy.”

Same results observed on:

  • Safari 12.1.2
  • Firefox 77.0.1
  • Chrome 83.0.4.*

I have not yet tested on IE or Edge, but it doesn’t surprise me that some people are experiencing no problem with IE, because if memory serves me correctly, it does not support the frame-ancestors directive (even more reason to avoid using IE).

Also, note: Even when specifying “parent” when instantiating Twitch.Player (js), the player still does not load.

Hopefully twitch can get this resolved soon, or provide info on whatever embed requirements/changes they have implemented because it’s a pretty big issue.

Thx,

– Rex