Fix issue with iframes and sentry script not loading due to CSP

discordextremelist · Feb 18, 2025 · cb315df · cb315df
1 parent eda71fc
commit cb315df
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/Util/Function/variables.ts b/src/Util/Function/variables.ts
@@ -212,9 +212,10 @@ export const variables = async (
 
     res.setHeader(
         "Content-Security-Policy",
-        "default-src 'self' 'unsafe-inline' www.youtube.com youtube.com status.discordextremelist.xyz cdn.jsdelivr.net cdnjs.cloudflare.com static.cloudflareinsights.com js.sentry-cdn.com fonts.googleapis.com fonts.gstatic.com stats.g.doubleclick.net; " +
+        "default-src 'self' 'unsafe-inline' status.discordextremelist.xyz cdn.jsdelivr.net cdnjs.cloudflare.com static.cloudflareinsights.com js.sentry-cdn.com browser.sentry-cdn.com fonts.googleapis.com fonts.gstatic.com stats.g.doubleclick.net; " +
             "img-src *; " +
-            "worker-src 'self';"
+            "worker-src 'self'; " +
+            "frame-src *;"
     );
 
     next();