This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow-site.git
The following commit(s) were added to refs/heads/main by this push:
new f78d1a2565 Set csp headers for YouTube (#1117)
f78d1a2565 is described below
commit f78d1a2565237c7e12ba37f996c1ac441a3576a4
Author: GPK <[email protected]>
AuthorDate: Sat Jan 25 22:18:01 2025 +0000
Set csp headers for YouTube (#1117)
---
landing-pages/site/static/.htaccess | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/landing-pages/site/static/.htaccess
b/landing-pages/site/static/.htaccess
index 428ea326df..23625847fa 100644
--- a/landing-pages/site/static/.htaccess
+++ b/landing-pages/site/static/.htaccess
@@ -39,3 +39,7 @@ RedirectMatch Permanent
^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator
RedirectMatch Permanent
^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator/gcp/vision.html
"https://airflow.apache.org/docs/apache-airflow-providers-google/stable/operators/cloud/vision.html";
RedirectMatch Permanent
^/docs/apache-airflow/(stable|2\.[0-9.]+)/howto/operator/papermill.html
"https://airflow.apache.org/docs/apache-airflow-providers-papermill/stable/operators.html";
RedirectMatch Permanent
^/docs/apache-airflow/(stable|2\.[0-9.]+)/profiling.html
"https://github.com/apache/airflow/blob/master/UPDATING.md";
+
+# Allow loading YouTube content after ensuring consent.
+# Additional allowances to be coordinated with privacy team
+Header set Content-Security-Policy "frame-src https://www.youtube-nocookie.com
https://www.youtube.com";
