xss block when adding youtube content

Hello

I have noticed a strange xss block when trying to add a content with a youtube video. This occurs on all areas where CB allows to input html text.

The test html is only as attached

Trying to add or edit gives a blank page, and only after reload do we get the final page.

The browser error is
Did you already encounter this problem ?

Do you know how to solve this ?

Thanks

Ps to precise
our filter text settings are : our filter tag attributes are : and our CB exclude tags from filtering are :

Replying to myself if others had the same problem : this comes from the setting Reflected XSS prevention from Admin Tools htaccess makers.

On a side note, is this setting important for CB according to your codes ?

On a side note, is this setting important for CB according to your codes ?

I assume you're adding the video with a editor textarea field? We apply XSS filtering there, but it's still not a good idea to accept iframes which by default CB doesn't allow. You should be able to just use a Video field as it has specific support for YouTube links or use CB Gallery which also supports YouTube links.

yes but we use this now in GJ event edit which does not support yet video fields or youtube links for events, so we have to use our cms editor

Unless you can hint me to add the specific code in event edit file in order to add videos from CB Gallery ? our users need something very simple to add youtube or other provider url. in event edit

CB Gallery will eventually provide a Joomla editor button to easily insert profile gallery entries, but aside from that you've already made the changes you needed to make to CB (allowing iframes) and adjusted your 3rd party extension to allow for inserting the videos. When CB Events is developed it'll likely have a media feature for inserting media (probably powered by CB Gallery).