Set the CSP worker-src to allow blobs

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

1 files changed, 6 insertions, 0 deletions

diff --git a/appinfo/app.php b/appinfo/app.php
index d3e5ec6..a250b93 100755
--- a/appinfo/app.php
+++ b/appinfo/app.php
@@ -17,3 +17,9 @@
 
 OCP\Util::addStyle( 'files_videoplayer', 'style' );
 OCP\Util::addscript( 'files_videoplayer', 'main');
+
+$csp = new \OCP\AppFramework\Http\ContentSecurityPolicy();
+$csp->addAllowedWorkerSrcDomain('\'self\'');
+$csp->addAllowedWorkerSrcDomain('blob:');
+$cspManager = \OC::$server->query(\OCP\Security\IContentSecurityPolicyManager::class);
+$cspManager->addDefaultPolicy($csp);