mirror of
https://github.com/yusufipk/OpenFrame.git
synced 2026-09-11 17:46:06 +00:00
feat: add YouTube to connect-src in Content Security Policy
This commit is contained in:
@@ -21,6 +21,7 @@ const cdnOrigin = bunnyCdnHostname ? `https://${bunnyCdnHostname}` : '';
|
|||||||
const connectSrcParts = [
|
const connectSrcParts = [
|
||||||
"'self'",
|
"'self'",
|
||||||
'https://video.bunnycdn.com',
|
'https://video.bunnycdn.com',
|
||||||
|
'https://www.youtube.com',
|
||||||
cdnOrigin,
|
cdnOrigin,
|
||||||
// Allow Next.js HMR websocket in development
|
// Allow Next.js HMR websocket in development
|
||||||
...(isDev ? ['ws://localhost:* wss://localhost:*'] : []),
|
...(isDev ? ['ws://localhost:* wss://localhost:*'] : []),
|
||||||
|
|||||||
Reference in New Issue
Block a user