StackOverflow
Watching videos has been a common activity in VRChat for many players, including those who are used to staying in public instances. After discussing with VRChat players around me, we found ourselves confused by the sudden ban on untrusted URLs, even when it is allowed in the setting menu. You may not be aware that video links from video websites like Bilibili (which is the most watched video platform in our country) cannot be directly resolved by the built-in video player, and watching videos there requires manually resolving it with external websites and resulting in an untrusted URL.
I understand that custom whitelist and no bans on private instances is a workaround for this problem, however:
  1. we don't expect world creators from worldwide to build a comprehensive list of URLs for this purpose, especially when they are not bothered by the ban themselves.
  2. we can move to private instances, but public instances are still a very important platform for free communication and in some sense a core experience in this game.
For the above reasons, I hope you can reconsider the ban on the untrusted URLs in public instances, for example, rollback the change, or get a more fine-grained option to allow those URLs in all instances. Otherwise, I hope to hear from you about a real solid reason for the ban, being more specific on the vulnerabilities playing those videos may trigger.
Removing useful functions should not be the primary option for security reasons. I write this post in hope that getting more discussion on this matter will come up with better solution to it so that more users are satisfied. Thank you for your understanding.
(The behavior has been confirmed in game)