網路安全專家劉俊雄先前曾經接受iThome的專訪,
分享他對於DDoS攻擊的觀察。
囿限於媒體篇幅和屬性,
劉俊雄趁著夜深人靜之際,
把他對於DDoS攻擊的觀察有更深入的分享!!
關注DDoS攻擊所有的資安與IT人員,
都不要錯過這一篇動人的分享!!
感謝奧天大大不藏私的經驗分享~~
[淺談 DDoS 攻擊]
幾個月前受訪談了些 DDoS 的話題,沒想到最近一連串爆發了這麼多事件,也讓個人淺見出現在幾篇 iThome 的報導
http://www.ithome.com.tw/news/109932
http://www.ithome.com.tw/news/110135
http://www.ithome.com.tw/news/110144
http://www.ithome.com.tw/news/110137
http://www.ithome.com.tw/news/111861
因訪談限制及媒體屬性,無法很完整的表達我的看法,趁著夜深人靜時整理一下 :
DDoS 大略可分為三個層級 - 網路層、系統層、應用層,
網路層為癱瘓目標頻寬,典型手法為 UDP/ICMP Flood、以及近年流行的各種 Reflection&Ampplification 洪水攻擊;
系統層為癱瘓目標的基礎建設或系統層,典型手法為 SYN Flood、Fragment Packet Flood、Connection Flood 等;
應用層為癱瘓目標的應用服務,典型手法為 SSL Flood、HTTP Flood、DNS Flood、Exploit、Slow Attack 等。
十多年前個人剛接觸 DDoS 的時候,盛行的是「細巧」的系統層/應用層攻擊,但近幾年因許多協定的 反射&放大 手法被開發、以及 IoT Botnet 的盛行,應該會有一段時間轉為 「爆量」 的網路層攻擊。
以開店作生意比喻 - 將店門口及前方道路視為網路出入口及上游,店裡設施和走道空間視為基礎建設,結帳櫃檯視為應用系統。則攻擊者可以堵住店門和馬路、可以塞爆店裡的走道和空間、又或者癱瘓結帳櫃檯。
而 DDoS 為何難防 ?
這與企業為何很難阻止駭客入侵的原因一樣,攻擊方與防守方處於不對等的立場,攻擊者有太多的方式可選擇,且可不斷的調整與嚐試,防守方卻礙於人力與預算限制,難以全天候對每一種手法都有良好的對應措施。
許多老闆總認為花錢買設備就可以了事,但偏偏這不是單一設備、單一解決方式可以完全處理的,應該沒有一家的服務或設備直接上架,完全不需調校就可以完美對應每一種攻擊手法,需要有經驗豐富的專業人士視實際攻擊狀況調校參數及規則。有如同一把大刀,在關公和小孩手上耍起來實有天壤之別啊!
以本次券商 DDoS 事件來說,由媒體報導看起來是屬於 [網路層] 的攻擊方式,但即使加大頻寬、或由ISP端阻擋住了,難保哪天不會出現針對系統層或應用層等更為精細、打得更為巧妙的手法,加上金融業幾乎全用 SSL 加密應用服務,會使中間的清洗商更難介入分析應用層攻擊(除非提交 SSL 金鑰)。
至於實務上應該要怎麼阻擋會比較理想?
我的看法是需 雲端清洗+本地防護,量大的攻擊由雲端或上游清洗處理,而細巧的攻擊可能穿過清洗中心,則由本地的防護機制處理,但絕對不會是由 "防火牆" 這萬年設備,至於用什麼設備可達到較好的阻擋效果請洽各大 SI。
另外若預算許可下,還可建立多個資料中心或介接多條 ISP 線路,配合 GSLB 機制快速切換 DNS ,讓攻擊者難以鎖定每一個出入口,可增加攻擊難度及應變時間。
另外真的遭遇 DDoS 攻擊時,個人的簡易 SOP 大概如下 -
1. 快速診斷,描述症狀由專業人士判斷(有側錄封包更佳)
2. 對症下藥
- 洪水攻擊 : 請求 ISP/清洗商 協助、Black Hole、更換 IP / Multi ISP / GSLB
- 系統層攻擊 : 更換撐不住的設備、關閉負載高的功能、調整系統參數延緩攻擊影響
- 應用層攻擊 : 增加服務能量、減少異常存取
3. 減少異常存取的方法:辨識特徵 + 過濾
- 網路層特徵 (IP/PORT/ID/TTL/SEQ/ACK/Window/...)
- 應用層特徵 (SSL/URL/Parameter/User-Agent/Referer/Cookie/Language/...)
4. 如果打到沒有特徵可過濾,則需靠應用層的機制來辨識真實使用者
- Redirection
- Challenge
- Authentication
5. 若無上述功能則儘快商調適合的設備。
以上是個人的看法,但我已經很多年沒直接處理 DDoS 的事件,也非任職於 ISP 方或 DDoS 防護服務廠商,只是單純的以技術角度分享,如有錯漏之處也請業界真正的高手不吝指教。
題外話,最近 DDoS 正夯,服務商們可仿效已有許多資安業者提供的 IR Retainer 服務,推出 DDoS Retainer,也許是不錯的商機 XD
[以上轉載請註明出處]
同時也有1部Youtube影片,追蹤數超過3萬的網紅膠攝現場,也在其Youtube影片中提到,20191101 膠攝Q&A 41- 私影輕便選擇,閃燈推介(00:09) 42- APS-C Upgrade,上A7III原廠副廠鏡頭組合(04:46) 43- 影風景方形Filter 和軟件比較(10:51) 44- 富士APS-C vs Canon Full Frame畫質有幾大差別(15:...
「parameter url」的推薦目錄:
- 關於parameter url 在 iThome Security Facebook 的精選貼文
- 關於parameter url 在 膠攝現場 Youtube 的最佳貼文
- 關於parameter url 在 Adding a parameter to the URL with JavaScript - Stack Overflow 的評價
- 關於parameter url 在 YouTube Embedded Players and Player Parameters - Google ... 的評價
- 關於parameter url 在 URL Query Parameter Wildcard 的評價
- 關於parameter url 在 How to Use URL Parameters for Facebook Ads Tracking - Jon ... 的評價
- 關於parameter url 在 Facebook introduces URL dynamic parameters | Newsfeed.org 的評價
- 關於parameter url 在 Enhancing your portal – URL Parameters - YouTube 的評價
- 關於parameter url 在 About URL parameters | Facebook Business Help Center 的評價
- 關於parameter url 在 What Facebook URL Parameters Are (And How to Use Them) 的評價
parameter url 在 膠攝現場 Youtube 的最佳貼文
20191101 膠攝Q&A
41- 私影輕便選擇,閃燈推介(00:09)
42- APS-C Upgrade,上A7III原廠副廠鏡頭組合(04:46)
43- 影風景方形Filter 和軟件比較(10:51)
44- 富士APS-C vs Canon Full Frame畫質有幾大差別(15:10)
45- 富士 Sony Vlogger 方便性和功能性能應如何選擇(20:53)
46- Sensor Size 同景深,光圈,主體距離既相互關係(27:55)
47- 去旅行影北極光,長時間曝光和主體人物點同時配合 (39:02)
48- Cal Mon影色範圍選擇,執相 AdobeRGB Reference viewing conditions現場設定,sRGB vs DCI-P3(48:01)
49- 人像色彩,Skin Tone,光暗,亮度之類Parameter應如何配合(54:26)
51 -Canon DSLR vs Mirrorless 鏡頭選擇與便攜性應如何取捨 (01:02:16)
URL:
https://en.wikipedia.org/wiki/Adobe_RGB_color_space
如果欣賞我們《膠攝現場》請Bookmark、訂閱及Like我們的網站、Youtube頻道同facebook Page啦!
網站:https://plasticphoto.hk
Youtube:https://www.youtube.com/plasticphoto
facebook:https://www.facebook.com/plasticphoto/
主持人個人專頁
Joey: https://www.facebook.com/joeypongpage/
Joey IG: https://www.instagram.com/joeypong/
Colin: https://www.facebook.com/pklamfoto/
Colin IG: https://www.instagram.com
parameter url 在 YouTube Embedded Players and Player Parameters - Google ... 的推薦與評價
Overview
This document explains how to embed a YouTube player in your application and also defines the parameters that are available in the YouTube embedded player.
By appending parameters to the IFrame URL, you can customize the playback experience in your application. For example, you can automatically play videos using the autoplay
parameter or cause a video to play repeatedly using the loop
parameter. You can also use the enablejsapi
parameter to enable the player to be controlled via the IFrame Player API.
This page currently defines all parameters supported in any YouTube embedded player. Each parameter definition identifies the players that support the corresponding parameter.
Note: Embedded players must have a viewport that is at least 200px by 200px. If the player displays controls, it must be large enough to fully display the controls without shrinking the viewport below the minimum size. We recommend 16:9 players be at least 480 pixels wide and 270 pixels tall.
Embed a YouTube playerYou can use any of the following methods to embed a YouTube player in your application and specify player parameters. Note that the instructions below demonstrate how to embed a player that loads a single video. The following section explains how to configure your player to load a playlist or a user's uploaded videos.
Embed a player using an<iframe>
tagDefine an <iframe>
tag in your application in which the src
URL specifies the content that the player will load as well as any other player parameters you want to set. The <iframe>
tag's height
and width
parameters specify the dimensions of the player.
If you create the <iframe>
element yourself (rather than using the IFrame Player API to create it), you can append player parameters directly to the end of the URL. The URL has the following format:
https://www.youtube.com/embed/VIDEO_ID
The <iframe>
tag below would load a 640x360px player that would play the YouTube video M7lc1UVf-VE
. Since the URL sets the autoplay
parameter to 1
, the video would play automatically once the player has loaded.
Embed a player using the IFrame Player API
<iframe id="ytplayer" type="text/html" width="640" height="360"
src="https://www.youtube.com/embed/M7lc1UVf-VE?autoplay=1&origin=http://example.com"
frameborder="0"></iframe>
Follow the IFrame Player API instructions to insert a video player in your web page or application after the Player API's JavaScript code has loaded. The second parameter in the constructor for the video player is an object that specifies player options. Within that object, the playerVars
property identifies player parameters.
The HTML and JavaScript code below shows a simple example that inserts a YouTube player into the page element that has an id
value of ytplayer
. The onYouTubePlayerAPIReady()
function specified here is called automatically when the IFrame Player API code has loaded. This code does not define any player parameters and also does not define other event handlers.
Select content to play
<div id="ytplayer"></div><script>
// Load the IFrame Player API code asynchronously.
var tag = document.createElement('script');
tag.src = "https://www.youtube.com/player_api";
var firstScriptTag = document.getElementsByTagName('script')[0];
firstScriptTag.parentNode.insertBefore(tag, firstScriptTag); // Replace the 'ytplayer' element with an <iframe> and
// YouTube player after the API code downloads.
var player;
function onYouTubePlayerAPIReady() {
player = new YT.Player('ytplayer', {
height: '360',
width: '640',
videoId: 'M7lc1UVf-VE'
});
}
</script>
You can configure your embedded player to load a video, a playlist, or a user's uploaded videos.
The following list explains these options:
Loading a video
For an IFrame embed, the YouTube video ID for the video that you want to load is specified in the IFrame's src
URL.
https://www.youtube.com/embed/VIDEO_ID
If you are using the YouTube Data API (v3), you can programmatically construct these URLs by retrieving video IDs from search results, playlist item resources, video resources, or other resources. After obtaining a video ID, replace the VIDEO_ID
text in the URLs above with that value to create the player URL.
Loading a playlist
Set the listType
player parameter to playlist
. In addition, set the list
player parameter to the YouTube playlist ID that you want to load.
https://www.youtube.com/embed?listType=playlist&list=PLAYLIST_ID
Note that you need to prepend the playlist ID with the letters PL
as shown in the following example:
https://www.youtube.com/embed?listType=playlist&list=PLC77007E23FF423C6
If you are using the YouTube Data API (v3), you can programmatically construct these URLs by retrieving playlist IDs from search results, channel resources, or activity resources. After obtaining a playlist ID, replace the PLAYLIST_ID
text in the URL above with that value.
Loading a user's uploaded videos
Set the listType
player parameter to user_uploads
. In addition, set the list
player parameter to the YouTube username whose uploaded videos you want to load.
https://www.youtube.com/embed?listType=user_uploads&list=USERNAME
Supported parameters
All of the following parameters are optional.
Parameters
autoplay
This parameter specifies whether the initial video will automatically start to play when the player loads. Supported values are
0
or 1
. The default value is 0
.If you enable Autoplay, playback will occur without any user interaction with the player;
playback data collection and sharing will therefore occur upon page load.
cc_lang_pref
This parameter specifies the default language that the player will use to display captions. Set the parameter's value to an ISO 639-1 two-letter language code.
If you use this parameter and also set the
cc_load_policy
parameter to 1
, then the player will show captions in the specified language when the player loads. If you do not also set the cc_load_policy
parameter, then captions will not display by default, but will display in the specified language if the user opts to turn captions on.cc_load_policy
Setting the parameter's value to
1
causes closed captions to be shown by default, even if the user has turned captions off. The default behavior is based on user preference.color
This parameter specifies the color that will be used in the player's video progress bar to highlight the amount of the video that the viewer has already seen. Valid parameter values are
red
and white
, and, by default, the player uses the color red in the video progress bar. See the YouTube API blog for more information about color options.controls
This parameter indicates whether the video player controls are displayed:
controls=0
– Player controls do not display in the player.
controls=1
(default) – Player controls display in the player.
disablekb
Setting the parameter's value to
1
causes the player to not respond to keyboard controls. The default value is 0
, which means that keyboard controls are enabled. Currently supported keyboard controls are:
Spacebar or [k]: Play / Pause
Arrow Left: Jump back 5 seconds in the current video
Arrow Right: Jump ahead 5 seconds in the current video
Arrow Up: Volume up
Arrow Down: Volume Down
[f]: Toggle full-screen display
[j]: Jump back 10 seconds in the current video
[l]: Jump ahead 10 seconds in the current video
[m]: Mute or unmute the video
[0-9]: Jump to a point in the video. 0
jumps to the beginning of the video, 1
jumps to the point 10% into the video, 2
jumps to the point 20% into the video, and so forth.
enablejsapi
Setting the parameter's value to
1
enables the player to be controlled via IFrame Player API calls. The default value is 0
, which means that the player cannot be controlled using that API.For more information on the IFrame API and how to use it, see the IFrame API documentation.
end
This parameter specifies the time, measured in seconds from the start of the video, when the player should stop playing the video. The parameter value is a positive integer.
Note that the time is measured from the beginning of the video and not from either the value of the
start
player parameter or the startSeconds
parameter, which is used in YouTube Player API functions for loading or queueing a video.fs
Setting this parameter to
0
prevents the fullscreen button from displaying in the player. The default value is 1
, which causes the fullscreen button to display.hl
Sets the player's interface language. The parameter value is an ISO 639-1 two-letter language code or a fully specified locale. For example,
fr
and fr-ca
are both valid values. Other language input codes, such as IETF language tags (BCP 47) might also be handled properly.The interface language is used for tooltips in the player and also affects the default caption track. Note that YouTube might select a different caption track language for a particular user based on the user's individual language preferences and the availability of caption tracks.
iv_load_policy
Setting the parameter's value to
1
causes video annotations to be shown by default, whereas setting to 3
causes video annotations to not be shown by default. The default value is 1
.list
The
list
parameter, in conjunction with the listType
parameter, identifies the content that will load in the player.
If the listType
parameter value is user_uploads
, then the list
parameter value identifies the YouTube channel whose uploaded videos will be loaded.
If the listType
parameter value is playlist
, then the list
parameter value specifies a YouTube playlist ID. In the parameter value, you need to prepend the playlist ID with the letters PL
as shown in the example below.
https://www.youtube.com/embed?
listType=playlist
&list=PLC77007E23FF423C6
If the
listType
parameter value is search
, then the list
parameter value specifies the search query. Note: This functionality is deprecated and will no longer be supported as of 15 November 2020.Note: If you specify values for the
list
and listType
parameters, the IFrame embed URL does not need to specify a video ID.listType
The
listType
parameter, in conjunction with the list
parameter, identifies the content that will load in the player. Valid parameter values are playlist
and user_uploads
.If you specify values for the
list
and listType
parameters, the IFrame embed URL does not need to specify a video ID.Note: A third parameter value,
search
, has been deprecated and will no longer be supported as of 15 November 2020.loop
In the case of a single video player, a setting of
1
causes the player to play the initial video again and again. In the case of a playlist
player (or custom player), the player plays the entire playlist and then starts again at the
first video.
Supported values are
0
and1
, and the default value is0
.Note: This parameter has limited
support in IFrame embeds. To loop a single video, set the
loop
parameter value to 1
and set the
playlist
parametervalue to the same video ID already specified in the Player API URL:
https://www.youtube.com/embed/VIDEO_ID?playlist=VIDEO_ID&loop=1
modestbranding
Note: This parameter is deprecated and has no effect. See the deprecation announcement for more information.
origin
This parameter provides an extra security measure for the IFrame API and is only supported for IFrame embeds. If you are using the IFrame API, which means you are setting the
enablejsapi
parameter value to 1
, you should always specify your domain as the origin
parameter value.playlist
This parameter specifies a comma-separated list of video IDs to play. If you specify a value, the first video that plays will be the
VIDEO_ID
specified in the URL path, and the videos specified in the playlist
parameter will play thereafter.playsinline
This parameter controls whether videos play inline or fullscreen on iOS. Valid values are:
0
: Results in fullscreen playback. This is currently the default value, though the default is subject to change.
1
: Results in inline playback for mobile browsers and for WebViews
created with the allowsInlineMediaPlayback
property set to YES
.
rel
Note: This parameter is changing on or after September 25, 2018.
Prior to the change, this parameter indicates whether the player should show related videos when playback of the initial video ends.
If the parameter's value is set to 1
, which is the default value, then the player does show related videos.
If the parameter's value is set to 0
, then the player does not show related videos.
After the change, you will not be able to disable related videos. Instead, if the rel
parameter is set to 0
, related videos will come from the same channel as the video that was just played.
start
This parameter causes the player to begin playing the video at the given number of seconds from the start of the video. The parameter value is a positive integer. Note that similar to the seekTo
function, the player will look for the closest keyframe to the time you specify. This means that sometimes the play head may seek to just before the requested time, usually no more than around two seconds.
widget_referrer
This parameter identifies the URL where the player is embedded. This value is used in YouTube Analytics reporting when the YouTube player is embedded in a widget, and that widget is then embedded in a web page or application. In that scenario, the origin
parameter identifies the widget provider's domain, but YouTube Analytics should not identify the widget provider as the actual traffic source. Instead, YouTube Analytics uses the widget_referrer
parameter value to identify the domain associated with the traffic source.
Revision history
August 15, 2023
Note: This is a deprecation announcement for the
modestbranding
parameter.
The modestbranding
parameter is deprecated and will
have no effect. To align with YouTube's branding requirements, the player now determines the
appropriate branding treatment based on a combination of factors, including player size, other API
parameters (e.g. controls
), and additional signals.
April 27, 2021
The playsinline
parameter definition has been updated
slightly to explain that the parameter pertains to both mobile browsers on iOS and iOS
WebViews.
October 15, 2020
The autoplay
parameter definition has been updated to
explain that if you enable Autoplay, playback will occur without any user interaction with the
player; playback data collection and sharing will therefore occur upon page load.
October 13, 2020
Note: This is a deprecation announcement for the embedded player
functionality that lets you configure the player to load search results. This announcement affects
the player's list
and
listType
parameters.
This change will become effective on or after 15 November 2020. After that time,
setting the listType
parameter value to search
will generate a
4xx
response code, such as 404
(Not Found
) or
410
(Gone
).
As an alternative, you can use the YouTube Data API's
search.list
method to retrieve search
results and then load selected videos in the player.
In addition to the change described above, the showinfo
parameter, which was
deprecated in 2018, has been removed from this document.
August 23, 2018
Note: This is a deprecation announcement for the showinfo
parameter. In addition, the behavior for the rel
parameter is changing. Titles, channel information, and related videos are an important part of YouTube’s core user experience, and these changes help to make the YouTube viewing experience consistent across different platforms.
The behavior for the
rel
parameter is changing on or after September 25, 2018. The effect of the change is that you will not be able to disable related videos. However, you will have the option of specifying that the related videos shown in the player should be from the same channel as the video that was just played.To be more specific:
Prior to the change, if the parameter's value is set to
0
, then the player does not show related videos.After the change, if the
rel
parameter is set to 0
, the player will show related videos that are from the same channel as the video that was just played.The
showinfo
parameter, which indicates whether the player should display information like the video title and uploader before the video starts playing, is also being deprecated. Following the change, the channel avatar and video title will always display before playback begins, when playback is paused, and when playback ends. The avatar being displayed is new behavior that will be consistent across all embedded players.These changes will become effective on or after September 25, 2018. After that time, the showinfo
parameter will be ignored. The behavior following the changes is consistent with the current default behavior for embedded players with the exception of the channel avatar changes mentioned above.
August 16, 2018
The cc_lang_pref
parameter can be used to specify the default language that the player will use to display captions. This parameter can be used in conjunction with the cc_load_policy
parameter to automatically show captions in the specified language during playback.
September 15, 2017
The controls
parameter's definition has been updated to remove references to the deprecated Flash (AS3) player. The value 2
has been deprecated as it was originally designed to provide a performance improvement for embeds that loaded a Flash player.
June 12, 2017
The new widget_referrer
parameter helps to enable more accurate YouTube Analytics reporting when the YouTube player is embedded in a widget, and that widget is then embedded in a web page or application.
November 1, 2016
This document has been updated to remove references to the deprecated Flash (AS3) player as well as to parameters only supported by that player. The YouTube Flash player was deprecated in January 2015.
October 20, 2016
This update contains the following changes:
The disablekb
parameter definition has been corrected to note that the default value is 0
, which means that keyboard controls are enabled. A value of 1
indicates that keyboard controls should be disabled.
The list of keyboard controls that the player supports has also been updated to include the following:
[f]: Toggle full-screen display
[j]: Jump back 10 seconds in the current video
[k]: Play / Pause
[l]: Jump ahead 10 seconds in the current video
[m]: Mute or unmute the video
[0-9]: Jump to a point in the video.
0
jumps to the beginning of the video, 1
jumps to the time 10% into the video, 2
jumps to the point 20% into the video, and so forth.In addition, the effect of pressing the [arrow left] or [arrow right] keys has changed. These keys now jump 5 seconds back (arrow left) or ahead (arrow right) in the current video.
August 11, 2016
This update contains the following changes:
The newly published YouTube API Services Terms of Service ("the Updated Terms"), discussed in detail on the YouTube Engineering and Developers Blog, provides a rich set of updates to the current Terms of Service. In addition to the Updated Terms, which will go into effect as of February 10, 2017, this update includes several supporting documents to help explain the policies that developers must follow.
The full set of new documents is described in the revision history for the Updated Terms. In addition, future changes to the Updated Terms or to those supporting documents will also be explained in that revision history. You can subscribe to an RSS feed listing changes in that revision history from a link in that document.
December 18, 2015
European Union (EU) laws require that certain disclosures must be given to and consents obtained from end users in the EU. Therefore, for end users in the European Union, you must comply with the EU User Consent Policy. We have added a notice of this requirement in our YouTube API Terms of Service.
August 19, 2015
The autohide
parameter has been deprecated for the HTML5 player. In HTML5 players, the video progress bar and player controls display or hide automatically. That behavior corresponds to an autohide
setting of 1
.
The theme
parameter has been deprecated for the HTML5 player. HTML5 players now always use the dark theme.
March 9, 2015
The document has been updated to reflect the fact that YouTube <object>
embeds, the YouTube Flash Player API and the YouTube JavaScript Player API have all been deprecated as of January 27, 2015. A deprecation warning appears in several sections of this document to help point readers to the IFrame Player API as an alternative.
The definition of the autohide
parameter has been updated to clarify the meaning of the parameter's values. The default behavior (autohide=2
) is that if the player has a 16:9 or 4:3 aspect ratio, the player's video progress bar and player controls display or hide automatically. Otherwise, those controls are visible throughout the video.
The definition of the hl
parameter has been updated to note that the parameter value could be an ISO 639-1 two-letter language code or a fully specified locale. For example, fr
and fr-ca
are both valid parameter values.
The definition of the enablejsapi
parameter has been reworded to clarify that the parameter enables a player to be controlled via API calls. The API could be either the IFrame Player API or the JavaScript Player API.
October 14, 2014
The HTML5 player now supports the cc_load_policy
, disablekb
, end
, fs
, list
, and listType
parameters. The parameter descriptions have been updated accordingly.
July 18, 2014
The new hl
parameter can be used to set the player's interface language. The interface language is used for tooltips in the player and also affects the default caption track. The selected caption track may also depend on the availability of caption tracks and user's individual language preferences.
The parameter's value is an ISO 639-1 two-letter language code, though other language input codes, such as IETF language tags (BCP 47) may also be handled properly.
The definition of the playsinline
parameter, which only affects HTML5 players on iOS, has been modified slightly. The definition now notes that setting the parameter value to 1
causes inline playback only for UIWebViews
created with the allowsInlineMediaPlayback
property set to TRUE
.
January 28, 2014
The playsinline
parameter controls whether videos play inline or fullscreen in an HTML5 player on iOS. Setting the value to 1
causes inline playback.
The Selecting content to play section has been updated to explain how to find YouTube video IDs and playlist IDs using the YouTube Data API (v3) rather than the older API version.
The controls
parameter's definition has been updated to reflect the fact that the parameter value only affects the time that the Flash player actually loads in IFrame embeds. In addition, for IFrame embeds, the parameter value also determines when the controls display in the player. If you set the parameter's value to 2
, then the controls display and the Flash player loads after the user initiates the video playback.
May 10, 2013
This update contains the following changes:
YouTube no longer identifies experimental API features and services. Instead, we now provide a list of YouTube APIs that are subject to the deprecation policy.
July 20, 2012
This update contains the following changes:
The definition of the controls
parameter has been updated to reflect support for a parameter value of 2
and to explain that, for AS3 players, the parameter value determines the time when the Flash player actually loads. If the controls
parameter is set to 0
or 1
, the Flash player loads immediately. If the parameter value is 2
, the Flash player does not load until the video playback is initiated.
June 5, 2012
This update contains the following changes:
The HTML5 player now supports the color
, modestbranding
, and rel
parameters, and the definitions for these parameters have been updated accordingly.
The definition of the showinfo
parameter has been updated to explain how that if the player is loading a playlist, and you explicitly set the parameter value to 1
, then, upon loading, the player will also display thumbnail images for the videos in the playlist. Note that this functionality is only supported for the AS3 player since that is the only player that can load a playlist.
May 4, 2012
This update contains the following changes:
The showinfo
parameter's definition has been updated to reflect the fact that the HTML5 player supports this parameter.
May 3, 2012
This update contains the following changes:
The new end
parameter specifies the time, measured in seconds from the start of the video, when the player should stop playing a video. Note that the time when playback is stopped is measured from the beginning of the video and not from the value of either the start
player parameter or the startSeconds
parameter, which is used in YouTube Player API functions for loading or queueing a video.
March 29, 2012
This update contains the following changes:
The new Embedding a YouTube player section explains different ways to embed a YouTube player in your application. This section covers manual IFrame embeds, IFrame embeds that use the IFrame Player API, and AS3 and AS2 object embeds. This section incorporates information from the old Example usage section, which has been removed.
The new Selecting content to play section explains how to configure the player to load a video, a playlist, search results for a specified query, or uploaded videos for a specified user.
The new list
and listType
parameters let you specify the content that the player should load. You can specify a playlist, a search query, or a particular user's uploaded videos.
The definitions of the fs
and rel
parameters have been updated to more clearly explain the default parameter values for the AS3 player.
The border
, color1
, egm
, hd
, and showsearch
parameters, which are all only supported for the deprecated AS2 Player API, have been moved to a new section named deprecated parameters only used in the AS2 Player API.
The document no longer provides a way to filter the parameter list to only display parameters supported in either the AS3, AS2, or HTML5 player. Instead, each parameter definition has been updated to identify the players that support that parameter.
August 11, 2011
This update contains the following changes:
The new theme
and color
parameters let you customize the appearance of the embedded player's player controls. See the YouTube API blog for more information.
June 8, 2011
This update contains the following changes:
The new modestbranding
parameter lets you use a YouTube player that does not show a YouTube logo. As of this release, the parameter was only supported for the AS3 embedded player and for IFrame embeds that loaded the AS3 player. As of June 5, 2012, the HTML5 player also supported this parameter.
February 14, 2011
This update contains the following changes:
The documentation has been updated to note that the AS2 Player API has been deprecated. The deprecation of the AS2 Player API was actually announced on October 14, 2009.
February 3, 2011
This update contains the following changes:
The documentation has been updated to identify parameters supported in the HTML5 (IFrame) embedded player.
The document now displays all of the parameters supported in any of YouTube's embedded players (HTML5, AS3, AS2).
The following parameters are supported in the AS2 player but have been deprecated for the newer AS3 and HTML5 players: border
, color1
, color2
, egm
, hd
, and showsearch
.
In addition, the loop
parameter has limited support in the AS3 player and in IFrame embeds, which could load either an AS3 or HTML player. Currently, the loop
parameter only works in the AS3 player when used in conjunction with the playlist
parameter. To loop a single video, set the loop
parameter to 1
and set the playlist
parameter value to the same video ID already specified in the Player API URL:
https://www.youtube.com/v/VIDEO_ID?version=3&loop=1&playlist=VIDEO_ID
Similarly, the controls
and playlist
parameters are supported in the AS3 and HTML5 players but are not and will not be supported in the AS2 player.
As noted above, IFrame embeds can load either an AS3 or HTML5 player. Though some parameters are not supported in both players, an IFrame embed that loads the AS3 player will support all parameters that work with that player and ignore all other parameters. Similarly, an IFrame embed that loads the HTML5 player will support all parameters that work with that player while ignoring all other parameters.
The parameter list has been updated to include the autohide
parameter, which indicates whether the player's video controls will automatically hide after a video begins playing.
The parameter list has been updated to include the controls
parameter, which indicates whether the player's video controls will display at all. (Player controls do display by default.)
The parameter list has been updated to include the playlist
parameter, which specifies a comma-separated list of video IDs to play.
The definition of the fs
has been updated to note that the fullscreen option will not work if you load the YouTube player into another SWF.
The example at the end of the document has been updated to use the embedded AS3 player instead of the embedded AS2 player. The parameters used in the example have also been updated to only include parameters that the AS3 player supports.
In addition, the instructions for constructing the URLs that contain player parameters have been updated to reflect the URL formats used by the AS3 and AS2 embedded and chromeless players as well as by the HTML5 player.
... <看更多>
parameter url 在 URL Query Parameter Wildcard 的推薦與評價
URL Query Parameter Wildcard · Query parameter name comparisons are case-insensitive. · Replace spaces in the parameter name with %20. · Only query parameters ... ... <看更多>
parameter url 在 Adding a parameter to the URL with JavaScript - Stack Overflow 的推薦與評價
... <看更多>
相關內容