From 01fbd1a5c7a1af439234c86491f360f229f33feb Mon Sep 17 00:00:00 2001
From: Laura Hausmann <laura@hausmann.dev>
Date: Mon, 18 Mar 2024 15:33:53 +0100
Subject: [PATCH] [backend] Fix video playback for files hosted from different
 origins

---
 packages/backend/src/server/web/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts
index 90126440c..f3c1ea788 100644
--- a/packages/backend/src/server/web/index.ts
+++ b/packages/backend/src/server/web/index.ts
@@ -469,7 +469,7 @@ router.get("/notes/:note", async (ctx, next) => {
 			ctx.set("Cache-Control", "public, max-age=15");
 			ctx.set(
 				"Content-Security-Policy",
-				"default-src 'self' 'unsafe-inline'; img-src *; frame-ancestors *",
+				"default-src 'self' 'unsafe-inline'; img-src *; media-src *; frame-ancestors *",
 			);
 
 			return;