diff options
| author | zrose584 <57181548+zrose584@users.noreply.github.com> | 2020-10-09 18:35:13 +0200 |
|---|---|---|
| committer | zrose584 <57181548+zrose584@users.noreply.github.com> | 2020-10-09 18:35:13 +0200 |
| commit | ed0b20e6c8c4dc018fa8ad25e2af436510e05f73 (patch) | |
| tree | a69a3a00f3deb5612b166dca672caaa70ced0abd /youtube | |
| parent | 4f46e14ad0154a9e8749c9e0e39a4a799d549dd4 (diff) | |
| download | yt-local-ed0b20e6c8c4dc018fa8ad25e2af436510e05f73.tar.lz yt-local-ed0b20e6c8c4dc018fa8ad25e2af436510e05f73.tar.xz yt-local-ed0b20e6c8c4dc018fa8ad25e2af436510e05f73.zip | |
Don't remove the CSP completely
Diffstat (limited to 'youtube')
| -rw-r--r-- | youtube/templates/base.html | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/youtube/templates/base.html b/youtube/templates/base.html index 462cac4..c647c68 100644 --- a/youtube/templates/base.html +++ b/youtube/templates/base.html @@ -3,9 +3,8 @@ <head> <meta charset="utf-8"> <title>{{ page_title }}</title> - {% if settings.proxy_images %} - <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; media-src 'self' https://*.googlevideo.com"> - {% endif %} + <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; media-src 'self' https://*.googlevideo.com; + {{ "img-src https://*.googleusercontent.com https://*.ggpht.com https://*.ytimg.com;" if not settings.proxy_images else "" }}"> <link href="{{ theme_path }}" type="text/css" rel="stylesheet"> <link href="/youtube.com/static/shared.css" type="text/css" rel="stylesheet"> <link href="/youtube.com/static/comments.css" type="text/css" rel="stylesheet"> |