This repository was archived by the owner on May 7, 2020. It is now read-only.
This repository was archived by the owner on May 7, 2020. It is now read-only.
Modify CSP policy to allow embedding of youtube videos #83
Description
The CSP policy on https://dotnetfoundation.org/reactiveui is preventing embedding the ReactiveUI introduction video.
https://developers.google.com/web/fundamentals/security/csp/
child-src lists the URLs for workers and embedded frame contents.
For example: child-src https://youtube.com would enable embedding videos
from YouTube but not from other origins. Use this in place of the
deprecated frame-src directive.
