From 3eb15b0a988230cea29ae15fdeeb6d28ec2bcd1b Mon Sep 17 00:00:00 2001 From: Jackson Harper Date: Fri, 16 Jun 2023 20:08:56 +0800 Subject: [PATCH] Add youtube to CSP --- packages/web/next.config.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/web/next.config.js b/packages/web/next.config.js index aa52c8144..da6ad160d 100644 --- a/packages/web/next.config.js +++ b/packages/web/next.config.js @@ -6,7 +6,7 @@ const ContentSecurityPolicy = ` font-src 'self' data: cdn.jsdelivr.net; form-action 'self' ${process.env.NEXT_PUBLIC_SERVER_BASE_URL}; frame-ancestors 'none'; - frame-src accounts.google.com platform.twitter.com www.youtube-nocookie.com; + frame-src self accounts.google.com platform.twitter.com www.youtube.com www.youtube-nocookie.com; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' accounts.google.com widget.intercom.io js.intercomcdn.com platform.twitter.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.segment.com; style-src 'self' 'unsafe-inline' accounts.google.com cdnjs.cloudflare.com;