https://csp-guide.com/tags/vimeo/ Recent content in Vimeo on CSP Guide Hugo -- gohugo.io en-us Sat, 18 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-vimeo-embeds/ Sat, 18 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-vimeo-embeds/ <p>Embedding Vimeo looks simple until your Content Security Policy blocks it.</p> <p>I’ve seen this happen a lot: the iframe is added, everything works locally, then production ships with a stricter CSP and the player turns into a blank rectangle. The fix usually isn’t “allow everything from <code>https:</code>” unless you enjoy undoing the point of CSP.</p> <p>For Vimeo embeds, the main question is how strict you want to be while still letting the player work. There are a few workable patterns, and each has tradeoffs.</p>