YouTube Videos Blocked in Speks on Salesforce

The Problem

When viewing a Spek that contains an embedded YouTube video inside Salesforce, the video fails to load and displays:

"This content is blocked. Contact the site owner to fix the issue."

This happens because Salesforce's Content Security Policy (CSP) is blocking the Spekit iframe from loading. The YouTube video itself isn't being blocked — Salesforce is blocking the Spekit frame that contains it.

Who This Affects

Users on Salesforce orgs where static.spekit.co has not been added as a Trusted URL. This is an org-level setting, so if one user is affected, all users in that org will be too.

How to Fix It

You'll need Salesforce admin access to make this change.

1. In Salesforce, go to Setup.
2. Search for Trusted URLs in the Quick Find box (under Security).
3. Click New Trusted URL.
4. Fill in the following:
   • API Name: Spekit
   • URL: https://static.spekit.co
   • Active: Checked
   • CSP Context: All
   • Under CSP Directives, check only the frame-src (iframe content) option
5. Click Save.
6. Have affected users hard refresh their browser (Ctrl + Shift + R on Windows, Cmd + Shift + R on Mac).

The YouTube video in the Spek should now load normally inside of your Spek.

Notes

• This is a per-org setting. If you have multiple Salesforce orgs, you may need to add the Trusted URL in each one.