fix(storyboards): Add HOST_URL to CSP so clients are able to get the storyboards from alternative domains)
All checks were successful
Invidious CI / build (push) Successful in 5m26s

This commit is contained in:
Fijxu 2025-02-18 20:24:58 -03:00
parent 7059c7ad24
commit a0edf628ec
Signed by: Fijxu
GPG key ID: 32C1DDF333EDA6A4

View file

@ -54,7 +54,7 @@ module Invidious::Routes::BeforeAll
"default-src 'none'",
"script-src 'self'",
"style-src 'self' 'unsafe-inline'",
"img-src 'self' data:",
"img-src 'self' data: " + HOST_URL,
"font-src 'self' data:",
"connect-src 'self'" + extra_connect_csp,
"manifest-src 'self'",