Fix removeXFrameOptions not working in YT #279

1 files changed, 6 insertions, 2 deletions

diff --git a/src/assets/javascripts/youtube/youtube.js b/src/assets/javascripts/youtube/youtube.js
index 6f022e21..61e73fdf 100644
--- a/src/assets/javascripts/youtube/youtube.js
+++ b/src/assets/javascripts/youtube/youtube.js
@@ -426,13 +426,17 @@ function removeXFrameOptions(e) {
   const url = new URL(e.url);
   const protocolHost = utils.protocolHost(url);
   if (!all().includes(protocolHost)) return;
-
   let isChanged = false;
-  for (const i in e.responseHeaders)
+  for (const i in e.responseHeaders) {
     if (e.responseHeaders[i].name == 'x-frame-options') {
       e.responseHeaders.splice(i, 1);
       isChanged = true;
     }
+    else if (e.responseHeaders[i].name == 'content-security-policy') {
+      e.responseHeaders.splice(i, 1);
+      isChanged = true;
+    }
+  }
   if (isChanged) return { responseHeaders: e.responseHeaders };
 }