From b23f7b0953c1c9b3f2528338542f07fc11427977 Mon Sep 17 00:00:00 2001
From: Tom Moor <tom.moor@gmail.com>
Date: Thu, 17 Feb 2022 09:12:02 -0800
Subject: [PATCH] fix: Allow private, domain-restricted, Vimeo embeds

---
 shared/editor/embeds/Vimeo.tsx            | 1 +
 shared/editor/embeds/components/Frame.tsx | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/shared/editor/embeds/Vimeo.tsx b/shared/editor/embeds/Vimeo.tsx
index a9cbc0415..e7b3fd73d 100644
--- a/shared/editor/embeds/Vimeo.tsx
+++ b/shared/editor/embeds/Vimeo.tsx
@@ -21,6 +21,7 @@ export default class Vimeo extends React.Component<Props> {
         title={`Vimeo Embed (${videoId})`}
         height="412px"
         border={false}
+        referrerPolicy="origin"
       />
     );
   }
diff --git a/shared/editor/embeds/components/Frame.tsx b/shared/editor/embeds/components/Frame.tsx
index b721447e0..c5da3753f 100644
--- a/shared/editor/embeds/components/Frame.tsx
+++ b/shared/editor/embeds/components/Frame.tsx
@@ -3,8 +3,9 @@ import { observer } from "mobx-react";
 import { OpenIcon } from "outline-icons";
 import * as React from "react";
 import styled from "styled-components";
+import { Optional } from "utility-types";
 
-type Props = React.HTMLAttributes<HTMLIFrameElement> & {
+type Props = Omit<Optional<HTMLIFrameElement>, "children"> & {
   src?: string;
   border?: boolean;
   title?: string;
@@ -53,6 +54,7 @@ class Frame extends React.Component<PropsWithRef> {
       title,
       canonicalUrl,
       isSelected,
+      referrerPolicy,
       src,
     } = this.props;
     const withBar = !!(icon || canonicalUrl);
@@ -76,6 +78,7 @@ class Frame extends React.Component<PropsWithRef> {
             title="embed"
             loading="lazy"
             src={src}
+            referrerPolicy={referrerPolicy}
             allowFullScreen
           />
         )}