mirror of
https://git.nadeko.net/Fijxu/invidious.git
synced 2025-12-14 17:15:09 +00:00
fix(storyboards): Add HOST_URL to CSP so clients are able to get the storyboards from alternative domains)
This commit is contained in:
@@ -54,7 +54,7 @@ module Invidious::Routes::BeforeAll
|
|||||||
"default-src 'none'",
|
"default-src 'none'",
|
||||||
"script-src 'self'",
|
"script-src 'self'",
|
||||||
"style-src 'self' 'unsafe-inline'",
|
"style-src 'self' 'unsafe-inline'",
|
||||||
"img-src 'self' data:",
|
"img-src 'self' data: " + HOST_URL,
|
||||||
"font-src 'self' data:",
|
"font-src 'self' data:",
|
||||||
"connect-src 'self'" + extra_connect_csp,
|
"connect-src 'self'" + extra_connect_csp,
|
||||||
"manifest-src 'self'",
|
"manifest-src 'self'",
|
||||||
|
|||||||
Reference in New Issue
Block a user