fix: allow YouTube embed in CSP

Signed-off-by: Ryan Cao <[email protected]>
ryanccn · Dec 3, 2023 · a504780 · a504780
1 parent e13634d
commit a504780
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/next.config.js b/next.config.js
@@ -13,7 +13,7 @@ const csp = `
   script-src 'self' umami.ryanccn.dev 'unsafe-inline' 'unsafe-eval';
   style-src 'self' 'unsafe-inline';
   img-src * blob: data:;
-  child-src 'none';
+  child-src 'none' youtube-nocookie.com;
   media-src 'none';
   font-src 'self';
   connect-src *;