Browse Source

Need "frame-src" CSP to load YouTube sandbox.

pull/195/head
Joachim Bauch 10 years ago
parent
commit
02c531591a
  1. 1
      server.conf.in

1
server.conf.in

@ -109,6 +109,7 @@ serverRealm = local
; data: URL for images. ; data: URL for images.
; The currently recommended CSP is: ; The currently recommended CSP is:
; default-src 'self'; ; default-src 'self';
; frame-src 'self' data:;
; style-src 'self' 'unsafe-inline'; ; style-src 'self' 'unsafe-inline';
; img-src 'self' data: blob:; ; img-src 'self' data: blob:;
; connect-src 'self' wss://server:port/ws blob:; ; connect-src 'self' wss://server:port/ws blob:;

Loading…
Cancel
Save