diff options
Diffstat (limited to 'src/assets/javascripts/youtube')
-rw-r--r-- | src/assets/javascripts/youtube/youtube.js | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/src/assets/javascripts/youtube/youtube.js b/src/assets/javascripts/youtube/youtube.js index 6f022e21..61e73fdf 100644 --- a/src/assets/javascripts/youtube/youtube.js +++ b/src/assets/javascripts/youtube/youtube.js @@ -426,13 +426,17 @@ function removeXFrameOptions(e) { const url = new URL(e.url); const protocolHost = utils.protocolHost(url); if (!all().includes(protocolHost)) return; - let isChanged = false; - for (const i in e.responseHeaders) + for (const i in e.responseHeaders) { if (e.responseHeaders[i].name == 'x-frame-options') { e.responseHeaders.splice(i, 1); isChanged = true; } + else if (e.responseHeaders[i].name == 'content-security-policy') { + e.responseHeaders.splice(i, 1); + isChanged = true; + } + } if (isChanged) return { responseHeaders: e.responseHeaders }; } |