fix(storyboards): Add HOST_URL to CSP so clients are able to get the storyboards from alternative domains)

This commit is contained in:
Fijxu 2025-02-18 20:24:58 -03:00
parent e0d4272070
commit 99224b9f60
No known key found for this signature in database
GPG Key ID: 32C1DDF333EDA6A4

View File

@ -54,7 +54,7 @@ module Invidious::Routes::BeforeAll
"default-src 'none'", "default-src 'none'",
"script-src 'self'", "script-src 'self'",
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"img-src 'self' data:", "img-src 'self' data: " + HOST_URL,
"font-src 'self' data:", "font-src 'self' data:",
"connect-src 'self'" + extra_connect_csp, "connect-src 'self'" + extra_connect_csp,
"manifest-src 'self'", "manifest-src 'self'",