From 2fe40c752b4272484972f141e406fbcb7fa0cdb8 Mon Sep 17 00:00:00 2001 From: tdro Date: Sat, 3 Dec 2022 01:02:40 -0500 Subject: themes/default/layouts/shortcodes/video.html: Default to self always To avoid hotlinking by mistake. Support media start and end fragments (https://www.w3.org/TR/media-frags/) separately. Add remote parameter for offloading to source --- config.json | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) (limited to 'config.json') diff --git a/config.json b/config.json index fc57fbe..25762ab 100644 --- a/config.json +++ b/config.json @@ -130,7 +130,6 @@ ], "frame-src": [ "'self'", - "imgur.com", "www.youtube-nocookie.com", "platform.twitter.com", "en.m.wikipedia.org", @@ -146,9 +145,7 @@ "'self'" ], "media-src": [ - "'self'", - "raw.githubusercontent.com", - "i.imgur.com" + "'self'" ], "object-src": [ "'self'", @@ -159,12 +156,10 @@ ], "script-src-elem": [ "'self'", - "s.imgur.com", "platform.twitter.com" ], "script-src": [ "'self'", - "s.imgur.com", "platform.twitter.com" ], "style-src": [ -- cgit v1.2.3