(airflow-site) branch main updated: csp for video iframes fix in head-end (#983)

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow-site.git


The following commit(s) were added to refs/heads/main by this push:
     new cea5c2c9c7 csp for video iframes fix in head-end (#983)
cea5c2c9c7 is described below

commit cea5c2c9c7e1600f76017633af325080112411e4
Author: Michael Robinson <68...@users.noreply.github.com>
AuthorDate: Wed Mar 20 12:17:41 2024 -0400

    csp for video iframes fix in head-end (#983)
    
    Signed-off-by: merobi-hub <me...@gmail.com>
---
 landing-pages/site/layouts/partials/hooks/head-end.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/landing-pages/site/layouts/partials/hooks/head-end.html b/landing-pages/site/layouts/partials/hooks/head-end.html
index 7dbf8418d5..5ecaf10f53 100644
--- a/landing-pages/site/layouts/partials/hooks/head-end.html
+++ b/landing-pages/site/layouts/partials/hooks/head-end.html
@@ -53,7 +53,7 @@
 {{ $vendorsHeader := index . "vendors~header" }}
 <link rel="preload" href="{{ relURL $vendorsHeader.js }}" as="script">
 
-<!-- CSP for YouTube videos -->
-<meta http-equiv="Content-Security-Policy" content="frame-src 'https://www.youtube.com'">
+<!-- CSP for YouTube video iframes -->
+<meta http-equiv="Content-Security-Policy" content="frame-src 'self' https://www.youtube.com;">
 
 {{ end }}