Fix Content Security Policy

This commit is contained in:
Timothy Warren 2021-02-18 07:15:43 -05:00
parent 10ea494594
commit c81271864d

View File

@ -236,7 +236,7 @@ class Controller {
$csp = [
"default-src 'self'",
"object-src 'none'",
'frame-src *.youtube.com',
"child-src 'self' *.youtube.com polyfill.io",
];
$view->addHeader('Content-Security-Policy', implode('; ', $csp));