fix: allow self and blob to load media in CSP

LibreTexts · Aug 1, 2024 · bad0b1c · bad0b1c
1 parent 924d7db
commit bad0b1c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/server.ts b/server/server.ts
@@ -57,6 +57,7 @@ app.use(
       ],
       frameSrc: ["'self'", "https://*.libretexts.org", "https://*.cloudflare.com", "https://www.youtube.com", "https://*.cloudflarestream.com"], // Cloudflare (Turnstile), YouTube, Cloudflare Stream
       imgSrc: ["'self'", "https:", "data:"],
+      mediaSrc: ["'self'", "blob:"],
       objectSrc: ["none"],
       scriptSrc: [
         "'self'",