Need "frame-src" CSP to load YouTube sandbox.

10 years ago · 02c531591a
1 changed files with 1 additions and 0 deletions
--- a/server.conf.in
+++ b/server.conf.in
@ -109,6 +109,7 @@ serverRealm = local
				@@ -109,6 +109,7 @@ serverRealm = local
 ; data: URL for images.
 ; The currently recommended CSP is:
 ;   default-src 'self';
+;   frame-src 'self' data:;
 ;   style-src 'self' 'unsafe-inline';
 ;   img-src 'self' data: blob:;
 ;   connect-src 'self' wss://server:port/ws blob:;