update Content-Security-Policy header for chromium

[aya]

fixes #113.

Problem

Video fails to start on chromium because of Content Security Policy directive.

Solution

I added a "frame-ancestors 'self'" to the CSP header in the nginx.conf of jitsi, and updated the /etc/nginx/conf.d/security.conf.inc file to add a "worker-src 'self' blob:" in the CSP headers too.

PR Status

Proposal.

[Tagadda]

Have you tested this yourself ? I don't have a running Jisti instance running to try this right now.

[aya]

Have you tested this yourself ?

Yes.