YouTube thumbnails are embedded on help page (performance, low bandwidth, GDPR compliance)

Created on 26 February 2024, 9 months ago

Problem/Motivation

When opening the "Help" tab, I see 54 requests to https://img.youtube.com/vi/{video id}/0.jpg in my browser dev tools' network tab.

I'm glad, my script/ad blocker was active on http://localhost, otherwise I would have downloaded a lot of useless images.

My main concern is privacy. I don't want to be tracked by surveillance capitalists. Because these are just my personal feelings, I have a better reason: If I would want to use the module in the EU, it would violate GDPR.

This is also a bandwidth and performance problem. Opening the help page in a location with bad internet connectivity or on a device with bandwidth quota would be a bad idea.

Steps to reproduce

open admin/structure/webform/help in a web browser

Proposed resolution

Don't embed YouTube thumbnails.

Alternative solution 1: Ask for consent before embedding images from third party.

Alternative solution 2: Disable or override webform.help route via contributed module.

Remaining tasks

User interface changes

API changes

Data model changes

πŸ› Bug report
Status

Closed: works as designed

Version

6.2

Component

User interface

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @raffaelj
  • Workaround:

    set "Video display" to "hidden" in "Advanced" sub tab under "Configuration" tab (admin/structure/webform/config/advanced). Now the lines "This screencast..." without the "Watch video" button below don't make any sense anymore, but at least the third party content is gone.

    Setting "Video display" to "link" still loads all YT thumbnails and the "Watch video" button is a link now, that opens the YT video on the same page.

    To make sure, that nobody enables it again in the future, a config override in settings.php helps:

    $config['webform.settings'] = [
      'ui' => [
        // prevent loading YT thumbs on help tab
        'video_display' => 'hidden',
      ],
    ];
  • Status changed to Closed: works as designed 9 months ago
  • πŸ‡ΊπŸ‡ΈUnited States jrockowitz Brooklyn, NY

    Hiding the video display is the best approach for GDPR compliance.

  • Privacy invasive settings should be opt-in instead of opt-out.

    And as mentioned above, the help text makes no sense anymore.

Production build 0.71.5 2024