I allowed scripts from cdn.jsdeliver.net and that was enough to get it going. Way less painful than getting an embedded third party video widget working.