custom-theme/talks: Configure Content-Security-Policy for Youtube

piotrnarajowski · sjanc · commit d5657f4791ae · 2025-04-14T12:26:04.000+02:00
.htaccess file is introduced to configure Content-Security-Policy
for Youtube. This is based on example on how to embed yt videos
from privacy-website.
diff --git a/custom-theme/.htaccess b/custom-theme/.htaccess
@@ -0,0 +1,3 @@
+# Allow loading YouTube content after ensuring consent.
+# Additional allowances to be coordinated with privacy team
+Header set Content-Security-Policy "frame-src https://www.youtube-nocookie.com https://www.youtube.com"

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+# Allow loading YouTube content after ensuring consent.`
	`2`	`+# Additional allowances to be coordinated with privacy team`
	`3`	`+Header set Content-Security-Policy "frame-src https://www.youtube-nocookie.com https://www.youtube.com"`