Fix Content Security Policy
This commit is contained in:
parent
55ff6b0213
commit
c6677de543
@ -236,7 +236,7 @@ class Controller {
|
||||
$csp = [
|
||||
"default-src 'self'",
|
||||
"object-src 'none'",
|
||||
'frame-src *.youtube.com',
|
||||
"child-src 'self' *.youtube.com polyfill.io",
|
||||
];
|
||||
|
||||
$view->addHeader('Content-Security-Policy', implode('; ', $csp));
|
||||
|
Loading…
Reference in New Issue
Block a user