From 2909fd6c403ad7683d1949affcb5fe8ef2ba60a9 Mon Sep 17 00:00:00 2001
From: Bob Vandevliet <info@bvandevliet.nl>
Date: Sat, 5 Jul 2025 11:34:15 +0200
Subject: [PATCH] More permissive CORS policies.

---
 public/includes/head.html | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/public/includes/head.html b/public/includes/head.html
index 6d8ee8d..0b16656 100644
--- a/public/includes/head.html
+++ b/public/includes/head.html
@@ -6,7 +6,16 @@
 
 <meta http-equiv="Content-Security-Policy" content="
     default-src 'self';
-    script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.fontawesome.com;
+    script-src 'self' 'unsafe-inline'
+      https://www.googletagmanager.com
+      https://cdn.jsdelivr.net
+      https://*.fontawesome.com;
+    media-src 'self'
+      https://www.youtube.com https://youtu.be
+      https://www.linkedin.com;
+    frame-src 'self'
+      https://www.youtube.com/embed/ https://youtu.be/embed/
+      https://www.linkedin.com/embed/;
     style-src 'self' 'unsafe-inline' https://*.fontawesome.com;
     font-src 'self' https://*.fontawesome.com;
     connect-src 'self' https://*.fontawesome.com;