If you are not using <access origin="*" /> (not recommended), you will need to allow the following domains with your config.xml to embed youtube video into the cordova Android developer application:
<access origin="https://*.youtube-nocookie.com" /> <access origin="https://*.youtube.com" /> <access origin="https://*.ytimg.com" /> <access origin="https://*.gstatic.com" /> <access origin="https://*.googlevideo.com" /> <access origin="https://*.google.com" />
This is used for privacy-enhanced insertion mode. The youtube-nocookie domain is apparently not required for a standard attachment.
source share