From c6677de5432131cc0b8c9e8a0769312ac28fad0c Mon Sep 17 00:00:00 2001 From: "Timothy J. Warren" Date: Thu, 18 Feb 2021 07:15:43 -0500 Subject: [PATCH] Fix Content Security Policy --- src/AnimeClient/Controller.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/AnimeClient/Controller.php b/src/AnimeClient/Controller.php index f96318d8..ab109960 100644 --- a/src/AnimeClient/Controller.php +++ b/src/AnimeClient/Controller.php @@ -236,7 +236,7 @@ class Controller { $csp = [ "default-src 'self'", "object-src 'none'", - 'frame-src *.youtube.com', + "child-src 'self' *.youtube.com polyfill.io", ]; $view->addHeader('Content-Security-Policy', implode('; ', $csp));