From 99224b9f60c8160d3a34e9aae38406634ed8949d Mon Sep 17 00:00:00 2001 From: Fijxu Date: Tue, 18 Feb 2025 20:24:58 -0300 Subject: [PATCH] fix(storyboards): Add HOST_URL to CSP so clients are able to get the storyboards from alternative domains) --- src/invidious/routes/before_all.cr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/invidious/routes/before_all.cr b/src/invidious/routes/before_all.cr index 2402dc32..75cf25ec 100644 --- a/src/invidious/routes/before_all.cr +++ b/src/invidious/routes/before_all.cr @@ -54,7 +54,7 @@ module Invidious::Routes::BeforeAll "default-src 'none'", "script-src 'self'", "style-src 'self' 'unsafe-inline'", - "img-src 'self' data:", + "img-src 'self' data: " + HOST_URL, "font-src 'self' data:", "connect-src 'self'" + extra_connect_csp, "manifest-src 'self'",