Assigned
Status Update
Comments
sn...@google.com <sn...@google.com> #2
We had a similar crash in production but the obfuscated trace looks close and makes no sense:
Caused by java.lang.ClassNotFoundException
Didn't find class "com.google.android.aidl.BaseStub" on path: DexPathList[[zip file "/data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/base.apk"],nativeLibraryDirectories=[/data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/lib/arm64, /data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/base.apk!/lib/arm64-v8a, /system/lib64, /system/vendor/lib64]]
Caused by java.lang.ClassNotFoundException
Didn't find class "com.google.android.aidl.BaseStub" on path: DexPathList[[zip file "/data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/base.apk"],nativeLibraryDirectories=[/data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/lib/arm64, /data/app/com.wayfair.wayfair.dev-Z7SYLQacxBCTrvutI7fmlQ==/base.apk!/lib/arm64-v8a, /system/lib64, /system/vendor/lib64]]
lu...@gmail.com <lu...@gmail.com> #3
This issue was opened on the CleverTap sdk: https://github.com/adjust/android_sdk/issues/402
They say they reached out to Google and Google fixed it, but with the same version 1.1.
Can we have a new version? We need repeatable builds.
They say they reached out to Google and Google fixed it, but with the same version 1.1.
Can we have a new version? We need repeatable builds.
Description
Description
When embedding the YouTube player in a website with Cross-Origin Embedder Policy (COEP) enabled, the player fails to render because www.youtube.com site is not sending the Cross-Origin-Embedder-Policy header.
How to repoduce
For example, let's use the HTML code returned by YouTube itself to embed this video :
Let's say this HTML code is served from a server with COEP enabled using this header:
Cross-Origin-Embedder-Policy: require-corp
When loading this page with Google Chrome the YouTube player fails to render. If you check the Google Chrome's Issue tab in Development tool there's an issue on the request to the YouTube server:
See attached screenshot.
Expected result
YouTube player renders.
Is it 100% reproducible?
Yes, when server uses
Cross-Origin-Embedder-Policy: require-corp
it is always reproducible.Proposed solution
Adding the following header to the response from YouTube fixes the issue:
Cross-Origin-Embedder-Policy: require-corp
This has been tested using a Chrome extension that is able to alter Response headers.