Changeset 430


Ignore:
Timestamp:
Jul 17, 2016, 6:25:25 AM (3 years ago)
Author:
lars@…
Message:

Fix YouTube?

File:
1 edited

Legend:

Unmodified
Added
Removed
  • www/content/htaccess

    r376 r430  
    476476# XXX irtf.org
    477477<IfModule mod_headers.c>
    478     Header set Content-Security-Policy: "default-src 'self' data:; script-src 'self' data: 'unsafe-inline' https://*.google-analytics.com"
     478    Header set Content-Security-Policy: "default-src 'self' data:; script-src 'self' data: 'unsafe-inline' https://*.google-analytics.com; child-src https://*.youtube.com; style-src 'self' data: 'unsafe-inline';"
    479479    # Header set Content-Security-Policy "script-src 'self'; object-src 'self'"
    480480    # `mod_headers` cannot match based on the content-type, however,
Note: See TracChangeset for help on using the changeset viewer.