playvideos: improves Content-Security-Policy (CSP) compliance

[thican]

Improves situation for #1513.

I hope it can integrate milestone 0.14.0 (#2105).

[nodiscc]

While we're at it, couldn't we automate the download of https://code.jquery.com/jquery-3.7.1.min.js during frontend builds? Instead of vendoring a massive minified js file

[thican]

While we're at it, couldn't we automate the download of https://code.jquery.com/jquery-3.7.1.min.js during frontend builds? Instead of vendoring a massive minified js file

Good idea, just I am not aware on how to make it work (yet?) but I approve this.

[thican]

I guess the plugin could be rewritten to discard usage of jquery, nowadays, no? I am not a Web dev so I might be wrong ;-)
As far as I understand the code of this plugin (why is it so much obfuscated!?), it simplifies the creation of tag such as div and a with CSS content to only create the play box which hold the frame for the video host. I guess jQuery is not really required with modern browsers for just those capabilities, no?

However I am a bit lost with the frontend build usage, I managed to integrate jquery with the correct version and verified its fingerprints, but is it okay then I load the JS script from its path node_modules/jquery/dist/jquery.min.js?

[7Ds7]

I guess the plugin could be rewritten to discard usage of jquery, nowadays, no? I am not a Web dev so I might be wrong ;-) As far as I understand the code of this plugin (why is it so much obfuscated!?), it simplifies the creation of tag such as div and a with CSS content to only create the play box which hold the frame for the video host. I guess jQuery is not really required with modern browsers for just those capabilities, no?

However I am a bit lost with the frontend build usage, I managed to integrate jquery with the correct version and verified its fingerprints, but is it okay then I load the JS script from its path node_modules/jquery/dist/jquery.min.js?

This comment made me look at the whole jquery video player plugin situation i came up with a solution that might be worth it here

[nodiscc]

Since #2138 was merged, I think this PR only needs to include the changes to plugins/playvideos/README.md