Merge pull request #1004 from UN-OCHA/IASC-802-csp-for-untv

chore: csp config for UNTV
UN-OCHA · Oct 14, 2024 · cdcfe5c · cdcfe5c
2 parents 048c000 + 77c5e61
commit cdcfe5c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml
@@ -13,7 +13,7 @@ seckit_xss:
     style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com https://www.google.com"
     img-src: "'self' data: https://*"
     media-src: "'self' data:"
-    frame-src: "'self' https://www.googletagmanager.com *.youtube.com platform.twitter.com view.genial.ly interactive.unocha.org https://bid.g.doubleclick.net https://td.doubleclick.net https://syndication.twitter.com"
+    frame-src: "'self' https://www.googletagmanager.com *.youtube.com platform.twitter.com view.genial.ly interactive.unocha.org https://bid.g.doubleclick.net https://td.doubleclick.net https://syndication.twitter.com *.un.org https://cdnapisec.kaltura.com"
     frame-ancestors: "'self'"
     child-src: "'self' blob:"
     font-src: "'self' data: fonts.gstatic.com https://use.typekit.net interagencystandingcommittee.org"