Update next.config.mjs

This commit is contained in:
Nate Kelley 2025-08-21 22:30:37 -06:00
parent b2797ee759
commit eb52262bcd
No known key found for this signature in database
GPG Key ID: FD90372AB8D98B4F
1 changed files with 2 additions and 1 deletions

View File

@ -45,7 +45,8 @@ const createCspHeader = (isEmbed = false) => {
? `frame-ancestors 'self' *`
: "frame-ancestors 'none'",
// Frame sources - allow embeds from accepted domains
"frame-src 'self' https://vercel.live https://*.twitter.com https://twitter.com https://*.x.com https://x.com https://*.youtube.com https://youtube.com https://*.youtube-nocookie.com https://youtube-nocookie.com https://*.youtu.be https://youtu.be https://*.vimeo.com https://vimeo.com ${publicUrlOrigin}",
// Escape publicUrlOrigin to ensure it is a valid CSP source value
`frame-src 'self' https://vercel.live https://*.twitter.com https://twitter.com https://*.x.com https://x.com https://*.youtube.com https://youtube.com https://*.youtube-nocookie.com https://youtube-nocookie.com https://*.youtu.be https://youtu.be https://*.vimeo.com https://vimeo.com ${publicUrlOrigin}`,
// Connect sources for API calls
(() => {
const connectSources = [