From d657a292cbf9aeafa4bbb5c9561603b0cfedf815 Mon Sep 17 00:00:00 2001 From: lazysoundsystem Date: Wed, 6 Nov 2024 18:17:30 +0100 Subject: [PATCH] chore: add csp for vimeo iframes Refs: UNO-859 --- config/seckit.settings.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml index da950ed..fefa7d7 100644 --- a/config/seckit.settings.yml +++ b/config/seckit.settings.yml @@ -13,7 +13,7 @@ seckit_xss: style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com" img-src: "'self' data: https://*.google-analytics.com https://*.googletagmanager.com gstatic.com https://www.google.com https://google.com" media-src: "'none'" - frame-src: "'self' https://www.googletagmanager.com *.un.org https://cdnapisec.kaltura.com" + frame-src: "'self' https://www.googletagmanager.com *.un.org https://cdnapisec.kaltura.com https://vimeo.com https://player.vimeo.com" frame-ancestors: "'self'" child-src: "'self'" font-src: "'self' data: fonts.gstatic.com"