The Problem
When viewing a Spek that contains an embedded YouTube video inside Salesforce, the video fails to load and displays:
"This content is blocked. Contact the site owner to fix the issue."
This happens because Salesforce's Content Security Policy (CSP) is blocking the Spekit iframe from loading. The YouTube video itself isn't being blocked — Salesforce is blocking the Spekit frame that contains it.
Who This Affects
Users on Salesforce orgs where static.spekit.co has not been added as a Trusted URL. This is an org-level setting, so if one user is affected, all users in that org will be too.
How to Fix It
You'll need Salesforce admin access to make this change.
- In Salesforce, go to Setup.
- Search for Trusted URLs in the Quick Find box (under Security).
- Click New Trusted URL.
- Fill in the following:
- API Name:
Spekit - URL:
https://static.spekit.co - Active: Checked
- CSP Context: All
- Under CSP Directives, check only the frame-src (iframe content) option
- API Name:
- Click Save.
- Have affected users hard refresh their browser (
Ctrl + Shift + Ron Windows,Cmd + Shift + Ron Mac).
The YouTube video in the Spek should now load normally inside of your Spek.
Notes
- This is a per-org setting. If you have multiple Salesforce orgs, you may need to add the Trusted URL in each one.