fix: youtube csp headers

rafaelsilva29 · jadiaconu · commit aab5d5ab4081 · 2026-01-30T14:58:21.000+01:00
Signed-off-by: Rafael Silva (rafaelsi) &lt;rafaelsi@cisco.com&gt;
diff --git a/deployments/docker/frontend/nginx/csp-header.env.conf b/deployments/docker/frontend/nginx/csp-header.env.conf
@@ -1 +1 @@
-add_header Content-Security-Policy "base-uri 'self'; object-src 'none'; script-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} 'nonce-111dd4a0-4c4e-43a9-8eb4-6446ad2e10c7' 'nonce-e3b5e669-1c54-41b8-877c-1d9a8ce049ba' 'nonce-c28133ca-0587-459b-9d44-7015cde0ef83' 'nonce-a762833a-23e0-400b-b00a-9350d6f7bc69' 'nonce-211adc2e-df7d-4cd2-9694-bf0993603f8f'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; manifest-src 'self' data:; default-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; connect-src 'self' http://localhost:4000 segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; img-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER}; frame-ancestors 'self';";
+add_header Content-Security-Policy "base-uri 'self'; object-src 'none'; script-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} 'nonce-111dd4a0-4c4e-43a9-8eb4-6446ad2e10c7' 'nonce-e3b5e669-1c54-41b8-877c-1d9a8ce049ba' 'nonce-c28133ca-0587-459b-9d44-7015cde0ef83' 'nonce-a762833a-23e0-400b-b00a-9350d6f7bc69' 'nonce-211adc2e-df7d-4cd2-9694-bf0993603f8f'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; manifest-src 'self' data:; default-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; connect-src 'self' http://localhost:4000 segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; img-src 'self' segment.com *.segment.com *.segment.io okta.com *.okta.com *.eticloud.io *.outshift.ai *.outshift.com *.oryapis.com *.duosecurity.com *.auth0.com *.oribi.io *.maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER}; frame-src 'self' https://www.youtube.com https://youtube.com; frame-ancestors 'self';";

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		-add_header Content-Security-Policy "base-uri 'self'; object-src 'none'; script-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} 'nonce-111dd4a0-4c4e-43a9-8eb4-6446ad2e10c7' 'nonce-e3b5e669-1c54-41b8-877c-1d9a8ce049ba' 'nonce-c28133ca-0587-459b-9d44-7015cde0ef83' 'nonce-a762833a-23e0-400b-b00a-9350d6f7bc69' 'nonce-211adc2e-df7d-4cd2-9694-bf0993603f8f'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; manifest-src 'self' data:; default-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; connect-src 'self' http://localhost:4000 segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; img-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER}; frame-ancestors 'self';";
	`1`	+add_header Content-Security-Policy "base-uri 'self'; object-src 'none'; script-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} 'nonce-111dd4a0-4c4e-43a9-8eb4-6446ad2e10c7' 'nonce-e3b5e669-1c54-41b8-877c-1d9a8ce049ba' 'nonce-c28133ca-0587-459b-9d44-7015cde0ef83' 'nonce-a762833a-23e0-400b-b00a-9350d6f7bc69' 'nonce-211adc2e-df7d-4cd2-9694-bf0993603f8f'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; manifest-src 'self' data:; default-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co https://fonts.gstatic.com ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; connect-src 'self' http://localhost:4000 segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER} ${VITE_API_URL}; img-src 'self' segment.com .segment.com .segment.io okta.com .okta.com .eticloud.io .outshift.ai .outshift.com .oryapis.com .duosecurity.com .auth0.com .oribi.io .maze.co ${VITE_OIDC_UI} ${VITE_OIDC_ISSUER}; frame-src 'self' https://www.youtube.com https://youtube.com; frame-ancestors 'self';";