diff --git a/public/docs/release-notes.md b/public/docs/release-notes.md
index 8c457e33..fcdd91f1 100644
--- a/public/docs/release-notes.md
+++ b/public/docs/release-notes.md
@@ -12,6 +12,7 @@
 
 ### Bugfixes
 - Ignore the healthcheck endpoint in the "too busy" limiter
+- Send the referrer origin for YouTube embeddings due to their requirement 
 
 ## <i class="fa fa-tag"></i> 1.10.3 <i class="fa fa-calendar-o"></i> 2025-04-09
 
diff --git a/public/js/extra.js b/public/js/extra.js
index 60830699..f6be7b6b 100644
--- a/public/js/extra.js
+++ b/public/js/extra.js
@@ -816,7 +816,7 @@ export function smoothHashScroll () {
 
 function imgPlayiframe (element, src) {
   if (!$(element).attr('data-videoid')) return
-  const iframe = $("<iframe style='border: none' allowfullscreen></iframe>")
+  const iframe = $('<iframe style="border: none" allowfullscreen referrerpolicy="strict-origin-when-cross-origin"></iframe>')
   $(iframe).attr('src', `${src + $(element).attr('data-videoid')}?autoplay=1`)
   $(element).find('img').css('visibility', 'hidden')
   $(element).append(iframe)