mirror of
https://git.nerdvpn.de/NerdVPN.de/invidious
synced 2026-02-14 22:51:42 +01:00
Sommerwiesel
38 lines
1.4 KiB
Diff
38 lines
1.4 KiB
Diff
From 236a2c70d3974f5a1fc55a5bc8047ff24d94bce2 Mon Sep 17 00:00:00 2001
|
|
From: =?UTF-8?q?=C3=89milien=20Devos?= <github@emiliendevos.be>
|
|
Date: Tue, 16 Aug 2022 06:51:52 +0000
|
|
Subject: [PATCH] more csp
|
|
|
|
---
|
|
src/invidious/routes/before_all.cr | 6 +++---
|
|
1 file changed, 3 insertions(+), 3 deletions(-)
|
|
|
|
diff --git a/src/invidious/routes/before_all.cr b/src/invidious/routes/before_all.cr
|
|
index 8e2a253f..5c7cc959 100644
|
|
--- a/src/invidious/routes/before_all.cr
|
|
+++ b/src/invidious/routes/before_all.cr
|
|
@@ -23,9 +23,9 @@ module Invidious::Routes::BeforeAll
|
|
# Allow media resources to be loaded from google servers
|
|
# TODO: check if *.youtube.com can be removed
|
|
if CONFIG.disabled?("local") || !preferences.local
|
|
- extra_media_csp = " https://*.googlevideo.com:443 https://*.youtube.com:443"
|
|
+ extra_media_csp = " https://*.googlevideo.com:443 https://*.youtube.com:443 https://*.invidious.nerdvpn.de:443"
|
|
else
|
|
- extra_media_csp = ""
|
|
+ extra_media_csp = " https://*.invidious.nerdvpn.de:443"
|
|
end
|
|
|
|
# Only allow the pages at /embed/* to be embedded
|
|
@@ -43,7 +43,7 @@ module Invidious::Routes::BeforeAll
|
|
"style-src 'self' 'unsafe-inline'",
|
|
"img-src 'self' data:",
|
|
"font-src 'self' data:",
|
|
- "connect-src 'self'",
|
|
+ "connect-src 'self' https://*.invidious.nerdvpn.de:443",
|
|
"manifest-src 'self'",
|
|
"media-src 'self' blob:" + extra_media_csp,
|
|
"child-src 'self' blob:",
|
|
--
|
|
2.36.1
|
|
|