fix(storyboards): Add HOST_URL to CSP so clients are able to get the storyboards from alternative domains)

This commit is contained in:
Fijxu
2025-02-18 20:24:58 -03:00
parent e0d4272070
commit 99224b9f60

View File

@@ -54,7 +54,7 @@ module Invidious::Routes::BeforeAll
"default-src 'none'", "default-src 'none'",
"script-src 'self'", "script-src 'self'",
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"img-src 'self' data:", "img-src 'self' data: " + HOST_URL,
"font-src 'self' data:", "font-src 'self' data:",
"connect-src 'self'" + extra_connect_csp, "connect-src 'self'" + extra_connect_csp,
"manifest-src 'self'", "manifest-src 'self'",