Set csp headers for YouTube (#1117)

apache · Jan 25, 2025 · f78d1a2 · f78d1a2
1 parent 1b2adb6
commit f78d1a2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/landing-pages/site/static/.htaccess b/landing-pages/site/static/.htaccess
@@ -39,3 +39,7 @@ RedirectMatch Permanent ^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator
 RedirectMatch Permanent ^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator/gcp/vision.html "https://airflow.apache.org/docs/apache-airflow-providers-google/stable/operators/cloud/vision.html"
 RedirectMatch Permanent ^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator/papermill.html "https://airflow.apache.org/docs/apache-airflow-providers-papermill/stable/operators.html"
 RedirectMatch Permanent ^/docs/apache-airflow/(stable|2\.[0-9.]+)/profiling.html "https://github.com/apache/airflow/blob/master/UPDATING.md"
+
+# Allow loading YouTube content after ensuring consent.
+# Additional allowances to be coordinated with privacy team
+Header set Content-Security-Policy "frame-src https://www.youtube-nocookie.com https://www.youtube.com"