From a5047803df96dcabb137bbcfd233e61ad453c334 Mon Sep 17 00:00:00 2001 From: Ryan Cao <70191398+ryanccn@users.noreply.github.com> Date: Sun, 3 Dec 2023 21:24:41 +0800 Subject: [PATCH] fix: allow YouTube embed in CSP Signed-off-by: Ryan Cao <70191398+ryanccn@users.noreply.github.com> --- next.config.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/next.config.js b/next.config.js index 91b295b..5c85c9b 100644 --- a/next.config.js +++ b/next.config.js @@ -13,7 +13,7 @@ const csp = ` script-src 'self' umami.ryanccn.dev 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src * blob: data:; - child-src 'none'; + child-src 'none' youtube-nocookie.com; media-src 'none'; font-src 'self'; connect-src *;