From f5c68579e57b0b3eb13313bad6bbeef89585c0a8 Mon Sep 17 00:00:00 2001 From: lazysoundsystem Date: Wed, 6 Nov 2024 18:12:32 +0100 Subject: [PATCH] chore: add csp for vimeo iframes Refs: UNO-859 --- config/seckit.settings.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml index 931ffe6..5114ec1 100644 --- a/config/seckit.settings.yml +++ b/config/seckit.settings.yml @@ -13,7 +13,7 @@ seckit_xss: style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com *.github.io" img-src: "'self' data: https://*.google-analytics.com https://*.googletagmanager.com gstatic.com https://www.google.com https://google.com *.github.com *.unocha.org" media-src: "'none'" - frame-src: "'self' https://www.googletagmanager.com https://ocha.fleeq.io *.un.org https://cdnapisec.kaltura.com" + frame-src: "'self' https://www.googletagmanager.com https://ocha.fleeq.io *.un.org https://cdnapisec.kaltura.com https://vimeo.com https://player.vimeo.com" frame-ancestors: "'self'" child-src: "'self'" font-src: "'self' data: fonts.gstatic.com"