Merge pull request #65 from kostrykin/kostrykin-patch-2

bgruening · web-flow · commit 78e24dc516cf · 2025-12-07T12:04:50.000+01:00
Allow `data:`-based `src` for `video` sources
diff --git a/jupyter_lab_config.py b/jupyter_lab_config.py
@@ -13,6 +13,7 @@
         "; ".join([
             f"default-src 'self' https: {CORS_ORIGIN}",
             f"img-src 'self' data: {CORS_ORIGIN}",
+            f"media-src 'self' data: {CORS_ORIGIN}",
             f"connect-src 'self' ws://{CORS_ORIGIN_HOSTNAME}",
             f"style-src 'unsafe-inline' 'self' {CORS_ORIGIN}",
             f"script-src https: 'unsafe-inline' 'unsafe-eval' 'self' {CORS_ORIGIN}"
diff --git a/jupyter_notebook_config.py b/jupyter_notebook_config.py
@@ -13,6 +13,7 @@
         "; ".join([
             f"default-src 'self' https: {CORS_ORIGIN}",
             f"img-src 'self' data: {CORS_ORIGIN}",
+            f"media-src 'self' data: {CORS_ORIGIN}",
             f"connect-src 'self' ws://{CORS_ORIGIN_HOSTNAME}",
             f"style-src 'unsafe-inline' 'self' {CORS_ORIGIN}",
             f"script-src https: 'unsafe-inline' 'unsafe-eval' 'self' {CORS_ORIGIN}"
