Embed team build walkthrough video on homepage; allow YouTube in CSP
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
@@ -63,7 +63,7 @@ function securityHeaders(extra={}) {
|
||||
return {
|
||||
'X-Content-Type-Options':'nosniff','X-Frame-Options':'DENY','Referrer-Policy':'strict-origin-when-cross-origin',
|
||||
'Permissions-Policy':'camera=(), microphone=(), geolocation=()',
|
||||
'Content-Security-Policy':"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'none'",
|
||||
'Content-Security-Policy':"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; font-src 'self' data:; form-action 'self'; frame-src https://www.youtube-nocookie.com; frame-ancestors 'none'",
|
||||
...extra
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user