[18.0] E-learning module allows users to copy YouTube/Vimeo video link

[danieldatri]

Odoo Version

• 16.0
• 17.0
• 18.0
• Other (specify)

Steps to Reproduce

Description:
In the Odoo e-learning module, when videos from YouTube or Vimeo are embedded in a course, the player displays a "Share" button and allows right-click actions. This enables users to copy the original video link.

This behavior constitutes a security/monetization issue, because it allows users to share paid content outside of the platform. If a course is intended to be paid, this allows anyone with the link to view the video without paying for the course.

Steps to reproduce:

1. Create a course with a video from YouTube or Vimeo.
2. Open the course as a student.
3. Hover over the video and notice the "Share" button.
4. Right-click on the video and select "Copy video URL" or "Copy embed code".
5. Use the copied link to watch the video outside of Odoo.

Expected behavior:

The embedded video should not display any "Share" button.

Right-click actions should be disabled or restricted to prevent copying the video URL.
Users should only be able to view the video within the platform after purchasing the course.

Copy link button on youtube video

Right click on youtube video

Share button on vimeo

Log Output

Support Ticket

5168614
No response