Changeset 16b0c00 in Klonkt for src/assets/js/embed-player.js

Timestamp:

06/20/2026 02:52:15 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

2873b30

Parents:

5f47671

Message:

fix(embed): Spotify API via CSP whitelist + faster fallback

Diagnosis (measured live): the loader open.spotify.com (200) loads the real
API bundle from embed-cdn.spotifycdn.com, which was NOT in our CSP scriptSrc
→ API never init → 8s wait before the bare iframe = "sluggish". Not an
ad-blocker issue.

• CSP: *.spotifycdn.com added to scriptSrc + connectSrc (+ *.scdn.co).
• Spotify API timeout 8s → 4s so the iframe fallback appears quickly if the API still doesn't initialise (CDN 503 / origin gating).

buster embed-player.js?v=5.

Co-Authored-By: Claude <noreply@…>

File:

• src/assets/js/embed-player.js (modified) (1 diff)

src/assets/js/embed-player.js

@@ -101 +101 @@
       };
       loadScript('https://open.spotify.com/embed/iframe-api/v1').catch(reject);
-      setTimeout(() => reject(new Error('Spotify API timeout')), API_TIMEOUT);
+      // Korter dan API_TIMEOUT: Spotify's bundle initialiseert snel óf helemaal
+      // niet (CDN 503 / origin-gating). Niet 8s wachten vóór de iframe-fallback.
+      setTimeout(() => reject(new Error('Spotify API timeout')), 4000);
     });
     return scripts.sp;