Error 153 on Youtube Videos

[MeganCox]

Everything has been working perfectly fine for months now. But this week, on all of the YouTube videos on our intranet pages, there's an error code 153. I haven't been able to find information on what the issue is. 

We used the Rich Content editor with the Video block and entered YouTube information on all the videos on topic pages. We have not changed any settings on our YouTube, and our IT department has let me know we have not made any updates to policies that would affect YouTube or ServiceNow. The only videos working are the ones that we have in the Video Carousel widget. I updated all of the videos the other day, and it randomly started working for an hour or so, but then it went back to having issues. 

Has anyone else experienced this? Any ideas for fixes that still allow us to have a video within the Rich Content widget?

[Johan van den H]

We have checked on our Zurich (non-prod) instance which contains a recent clone of our prod instance and the error 153 is still present when a YouTube video is embedded in a knowledge article.

Security Center still shows the same Hardening Compliance Score after changing the property as proposed by ServiceNow earlier in this thread.

[BenzChua31]

I can confirmed Zurich Patch 3 did not have the issue, as I tested that myself.

Working with NOW Support, they had also tested with Patch 1 and Patch 2 of Zurich, and said the issue was not reproducible in their PDIs.

Is your prod instance Zurich? If not, a clone to non-prod would "revert" it from Zurich.

Security Center score doesn't update for you because the score impact for this property is 0.35. For any other clients, this score may cause a drop in percentage. 

What are the implications with using origin-when-cross-origin vs default? 
Is there any backwards compatibility issue? 

Does default include "strict-origin-when-cross-origin"? Would enforcing it led to reduced security?
It is not in the System Property, but does it use it?

[JD3131]

Embedded YouTube videos play just fine in our Prod "Platform" environment. However, they are still not able to play in the Service Portal. We have been editing all videos and links in the Service Portal to send people outside of ServiceNow to watch the videos directly on Youtube. This isn't the cleanest option, but it does disguise things just enough to keep from upsetting our customers. At some point, however, folks are going to complain about having to watch ads when being sent to YouTube.com

[Krishnakali]

The YouTube video might be currently unavailable in a few versions on the doc site, as we have already retired it and replaced it with a new one. The latest video will be available on the doc site with the December doc site refresh, starting December 12. Thanks!

[jsanjuan]

Following https://www.servicenow.com/docs/bundle/zurich-platform-security/page/administer/security-center/refe...

Change com.glide.security.referrerpolicy  property from default to either "origin" or "origin-when-cross-origin".  This will fix the issue, per https://www.reddit.com/r/obs/comments/1olfb8k/solution_to_youtube_error_153_fixing_browser/?rdt=4332....

See full technical details here: https://developers.google.com/youtube/terms/required-minimum-functionality#embedded-player-api-clien...).  The specific text:

API Client Identity and Credentials
API Clients that use the YouTube embedded player (including the YouTube IFrame Player API) must provide identification through the HTTP Referer