feat(Plugs.SecureHeaders): add Vimeo to frame-src CSP directive

mbta · Feb 18, 2025 · 06aceb4 · 06aceb4
1 parent 237ceaf
commit 06aceb4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/dotcom_web/plugs/secure_headers.ex b/lib/dotcom_web/plugs/secure_headers.ex
@@ -34,6 +34,7 @@ defmodule DotcomWeb.Plugs.SecureHeaders do
       www.googletagmanager.com
       www.instagram.com
       *.soundcloud.com
+      *.vimeo.com
     ],
     img: ~w[
       img-src