fix: add cdn.getunleash.io to media-src

2025-12-21 20:06:40 +01:00 · 2025-12-18 09:17:50 +01:00 · 2025-12-18 09:17:50 +01:00 · cc55ad8c19
commit cc55ad8c19
parent a770549fd0
1 changed files with 2 additions and 0 deletions
--- a/src/lib/middleware/secure-headers.ts
+++ b/src/lib/middleware/secure-headers.ts
@ -64,6 +64,8 @@ const secureHeaders: (config: IUnleashConfig) => RequestHandler = (config) => {
                        ...config.additionalCspAllowedDomains.connectSrc,
                    ],
                    mediaSrc: [
+                        "'self'",
+                        'cdn.getunleash.io',
                        '*.youtube.com',
                        '*.youtube-nocookie.com',
                        ...config.additionalCspAllowedDomains.mediaSrc,