From 6692db992d17d99ed1c6f518f38fb456adc62bd1 Mon Sep 17 00:00:00 2001
From: yusufipk <yusufipek@protonmail.com>
Date: Sat, 23 May 2026 20:44:52 +0200
Subject: [PATCH] feat: add YouTube to connect-src in Content Security Policy

---
 next.config.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/next.config.ts b/next.config.ts
index d10c84b..9decc66 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -21,6 +21,7 @@ const cdnOrigin = bunnyCdnHostname ? `https://${bunnyCdnHostname}` : '';
 const connectSrcParts = [
   "'self'",
   'https://video.bunnycdn.com',
+  'https://www.youtube.com',
   cdnOrigin,
   // Allow Next.js HMR websocket in development
   ...(isDev ? ['ws://localhost:* wss://localhost:*'] : []),