We know this is not ideal for user, but it means there are 'shared objects' between the two codebases which require users allow third party sites (any other domain including subdomains) access to local storage.
BBC: Your guide to the BBC Embedded Media Player