Don't remove the CSP completely

This commit is contained in:
zrose584 2020-10-09 18:35:13 +02:00
parent 4f46e14ad0
commit ed0b20e6c8

View File

@ -3,9 +3,8 @@
<head>
<meta charset="utf-8">
<title>{{ page_title }}</title>
{% if settings.proxy_images %}
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; media-src 'self' https://*.googlevideo.com">
{% endif %}
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; media-src 'self' https://*.googlevideo.com;
{{ "img-src https://*.googleusercontent.com https://*.ggpht.com https://*.ytimg.com;" if not settings.proxy_images else "" }}">
<link href="{{ theme_path }}" type="text/css" rel="stylesheet">
<link href="/youtube.com/static/shared.css" type="text/css" rel="stylesheet">
<link href="/youtube.com/static/comments.css" type="text/css" rel="stylesheet">