Embedded Videos Blocked in Speks on Salesforce

Embedded videos in a Spek sometimes fail to load inside Salesforce due to a Salesforce security setting. This article explains why it happens and how to fix it.

1. The Problem

When viewing a Spek that contains an embedded (e.g., YouTube) video inside Salesforce, the video fails to load and displays:

"This content is blocked. Contact the site owner to fix the issue."

This happens because Salesforce's Content Security Policy (CSP) is blocking the Spekit iframe from loading. The video itself isn't being blocked — Salesforce is blocking the Spekit frame that contains it.

2. Who This Affects

Users on Salesforce orgs where static.spekit.co has not been added as a Trusted URL. This is an org-level setting, so if one user is affected, all users in that org will be too.

3. How to Fix It

You'll need Salesforce admin access to make this change.

1. In Salesforce, go to Setup.
2. Search for Trusted URLs in the Quick Find box (under Security).
3. Click New Trusted URL.
4. Fill in the following:
   • API Name: Spekit
   • URL: https://static.spekit.co
   • Active: Checked
   • CSP Context: All
   • Under CSP Directives, check only the frame-src (iframe content) option
5. Click Save.
6. Have affected users hard refresh their browser (Ctrl + Shift + R on Windows, Cmd + Shift + R on Mac).

The embedded video in the Spek should now load normally inside of your Spek.