From eed24df7266f8f16c5120d4b04be589c051cf539 Mon Sep 17 00:00:00 2001
From: rgarcia <72655+rgarcia@users.noreply.github.com>
Date: Thu, 20 Aug 2026 14:27:32 +0000
Subject: [PATCH 1/2] Document replay iframe embedding
---
browsers/replays.mdx | 22 ++++++++++++++++++++++
1 file changed, 22 insertions(+)
diff --git a/browsers/replays.mdx b/browsers/replays.mdx
index 751bf899..82955f35 100644
--- a/browsers/replays.mdx
+++ b/browsers/replays.mdx
@@ -237,3 +237,25 @@ func main() {
}
```
+
+## Embedding a replay
+
+Set an iframe's `src` to the `replay_view_url` returned when you start or list a replay. Give the iframe an explicit aspect ratio so the player keeps its shape while loading, and enable fullscreen playback.
+
+Replace `REPLAY_VIEW_URL` with the URL returned by the API:
+
+```html
+
+
+
+```
+
+Use the recorded browser's viewport ratio if it differs from `16 / 10`. Treat replay URLs as sensitive. If your application enforces a Content Security Policy, configure `frame-src` to permit every origin used to load the replay.
From c628ab6cc5030783d27df0a223ba33e154e6c019 Mon Sep 17 00:00:00 2001
From: rgarcia <72655+rgarcia@users.noreply.github.com>
Date: Thu, 20 Aug 2026 14:38:16 +0000
Subject: [PATCH 2/2] Specify replay iframe CSP
---
browsers/replays.mdx | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/browsers/replays.mdx b/browsers/replays.mdx
index 82955f35..1e341f27 100644
--- a/browsers/replays.mdx
+++ b/browsers/replays.mdx
@@ -240,11 +240,16 @@ func main() {
## Embedding a replay
-Set an iframe's `src` to the `replay_view_url` returned when you start or list a replay. Give the iframe an explicit aspect ratio so the player keeps its shape while loading, and enable fullscreen playback.
+Set an iframe's `src` to the `replay_view_url` returned when you start or list a replay. Give the iframe an explicit aspect ratio so the player keeps its shape while loading, and enable fullscreen playback. Merge the example's `frame-src` sources into your existing Content Security Policy.
Replace `REPLAY_VIEW_URL` with the URL returned by the API:
```html
+
+