Add csp exception for youtube

bcgov · Jul 14, 2023 · ba7cf62 · ba7cf62
1 parent 10044b8
commit ba7cf62
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/met-web/nginx/nginx.dev.conf b/met-web/nginx/nginx.dev.conf
@@ -42,7 +42,7 @@ http {
     # add in most common security headers
     add_header Content-Security-Policy "
       default-src 'self' https://kit.fontawesome.com https://ka-f.fontawesome.com data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; 
-      script-src 'self' 'sha256-JXGej4mPACbE/fP5kuunldJEyMk62sNjNe85DtAcMoU=' https://kit.fontawesome.com https://ka-f.fontawesome.com https://www2.gov.bc.ca https://cdn.form.io https://api.mapbox.com 'unsafe-eval';
+      script-src 'self' 'sha256-JXGej4mPACbE/fP5kuunldJEyMk62sNjNe85DtAcMoU=' https://kit.fontawesome.com https://ka-f.fontawesome.com https://www2.gov.bc.ca https://cdn.form.io https://api.mapbox.com 'unsafe-eval' https://www.youtube.com;
       worker-src 'self' blob:;
       img-src 'self' data: blob: https://citz-gdx.objectstore.gov.bc.ca;
       style-src 'self' 'unsafe-inline';