feat: add YouTube to connect-src in Content Security Policy

2026-09-11 09:36:08 +00:00 · 2026-05-23 20:44:52 +02:00
parent 378ca1977b
commit 6692db992d
1 changed files with 1 additions and 0 deletions
@@ -21,6 +21,7 @@ const cdnOrigin = bunnyCdnHostname ? `https://${bunnyCdnHostname}` : '';
 const connectSrcParts = [
  "'self'",
  'https://video.bunnycdn.com',
+  'https://www.youtube.com',
  cdnOrigin,
  // Allow Next.js HMR websocket in development
  ...(isDev ? ['ws://localhost:* wss://localhost:*'] : []),