Add the frame-src permission with YouTube hosts

whitphx · Dec 3, 2022 · 7b27991 · 7b27991
1 parent 347395f
commit 7b27991
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/packages/desktop/craco.config.js b/packages/desktop/craco.config.js
@@ -37,6 +37,8 @@ module.exports = {
         "img-src * blob: data:",
         // Allow <audio> and <video> to load any resources
         "media-src * blob:",
+        // For st.video() to work with YouTube links. It handles YouTube links in a special way and loads YT resources: https://github.com/streamlit/streamlit/blob/1.15.2/frontend/src/components/elements/Video/Video.tsx#L69
+        "frame-src https://*.youtube.com",
       ]
         .filter(Boolean)
         .join("; ");