Fix Content Security Policy

2021-02-18 07:15:43 -05:00 · 2021-02-18 07:15:43 -05:00 · c81271864d
parent 10ea494594
commit c81271864d
1 changed files with 1 additions and 1 deletions
--- a/src/AnimeClient/Controller.php
+++ b/src/AnimeClient/Controller.php
@ -236,7 +236,7 @@ class Controller {
 		$csp = [
 			"default-src 'self'",
 			"object-src 'none'",
-			'frame-src *.youtube.com',
+			"child-src 'self' *.youtube.com polyfill.io",
 		];

 		$view->addHeader('Content-Security-Policy', implode('; ', $csp));