fix: CSP allow embedding from youtube
diff --git a/static/.htaccess b/static/.htaccess
index b627675..01f74b7 100644
--- a/static/.htaccess
+++ b/static/.htaccess
@@ -1323,7 +1323,7 @@
<IfModule mod_headers.c>
# (1) (2) (3) (4) (5)
- Header set Content-Security-Policy "default-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none' https://www.youtube.com/; upgrade-insecure-requests" "expr=%{CONTENT_TYPE} =~ m#text/html#i"
+ Header set Content-Security-Policy "default-src 'self' https://www.youtube.com/; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests" "expr=%{CONTENT_TYPE} =~ m#text/html#i"
</IfModule>
# ----------------------------------------------------------------------
