This repository has been archived by the owner on May 7, 2020. It is now read-only.

Modify CSP policy to allow embedding of youtube videos #83

Open

ghuntley opened this issue Aug 7, 2017 · 0 comments

Member

ghuntley commented Aug 7, 2017 •

edited

Loading

The CSP policy on https://dotnetfoundation.org/reactiveui is preventing embedding the ReactiveUI introduction video.

https://developers.google.com/web/fundamentals/security/csp/

child-src lists the URLs for workers and embedded frame contents. 
For example: child-src https://youtube.com would enable embedding videos
from YouTube but not from other origins. Use this in place of the
deprecated frame-src directive.

The text was updated successfully, but these errors were encountered:

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.