search

jungvonmatt / wekit

A Jamstack kit for Contentful, Hugo and Netlify.
https://www.wekit.dev
MIT License
14 stars 4 forks source link

Netlify: CSP header does not allow videos src from Contentful #38

Closed peterschewe closed 2 years ago

peterschewe commented 2 years ago

Videos from Contentful are blocked at Netlify by our CSP header.

media-src currently only allows 'self'. We should add videos.ctfassets.net to this.

See https://github.com/jungvonmatt/wekit/blob/33c000b4391f4799d12831dc973895ca3035e587/templates/app/static/_headers#L8