Added CSP param to allow embedding of FediMusicPlayer

2023-04-19 22:14:54 -07:00
1 changed files with 1 additions and 0 deletions
--- a/lib/pleroma/web/plugs/http_security_plug.ex
+++ b/lib/pleroma/web/plugs/http_security_plug.ex
@ -130,6 +130,7 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
    |> add_csp_param(script_src)
    |> add_csp_param(insecure)
    |> add_csp_param(report)
+    |> add_csp_param("frame-src https://music.yandere.cc")
    |> :erlang.iolist_to_binary()
  end