It's annoying because it's just the same-origin thing stopping it working.

I see there is an origin parameter[1] which sounds like it is nearly what is needed.

I don't know exactly what CORS setting is needed to make this work though.

[1] https://developers.google.com/youtube/player_parameters#orig...