fix: allow youtube frame (#2562)

Signed-off-by: Olblak <[email protected]>

Author: olblak

layouts/index.headers

@@ -2,7 +2,7 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
   X-Content-Type-Options: nosniff
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self' https://asciinema.org; frame-ancestors https://jamstackthemes.dev; manifest-src 'self'; connect-src 'self' https://plausible.io https://cdn.matomo.cloud https://updatecli.matomo.cloud ; font-src 'self'; img-src 'self' https://cdn.matomo.cloud https://updatecli.matomo.cloud data:; script-src 'self' https://cdn.matomo.cloud https://updatecli.matomo.cloud https://plausible.io https://asciinema.org https://www.updatecli.io 'unsafe-inline'; style-src 'self'
+  Content-Security-Policy: default-src 'self' https://asciinema.org; frame-src 'self' https://asciinema.org https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors https://jamstackthemes.dev; manifest-src 'self'; connect-src 'self' https://plausible.io https://cdn.matomo.cloud https://updatecli.matomo.cloud ; font-src 'self'; img-src 'self' https://cdn.matomo.cloud https://updatecli.matomo.cloud data:; script-src 'self' https://cdn.matomo.cloud https://updatecli.matomo.cloud https://plausible.io https://asciinema.org https://www.updatecli.io 'unsafe-inline'; style-src 'self'
   X-Frame-Options: SAMEORIGIN
   Referrer-Policy: strict-origin
   Feature-Policy: geolocation 'self'