Remove CSP for embed

diff --git a/server/controllers/client.ts b/server/controllers/client.ts
index f9bbedc92126fa1551bb2974813456eb31768632..dc3ff18fc7e6f1cd8b7a721eff48776f696977c5 100644 (file)
--- a/server/controllers/client.ts
+++ b/server/controllers/client.ts
@@ -2,7 +2,7 @@ import * as express from 'express'
 import { join } from 'path'
 import { root } from '../helpers/core-utils'
 import { ACCEPT_HEADERS, STATIC_MAX_AGE } from '../initializers/constants'
-import { asyncMiddleware, embedCSP } from '../middlewares'
+import { asyncMiddleware } from '../middlewares'
 import { buildFileLocale, getCompleteLocale, is18nLocale, LOCALE_FILES } from '../../shared/models/i18n/i18n'
 import { ClientHtml } from '../lib/client-html'
 import { logger } from '../helpers/logger'
@@ -21,7 +21,6 @@ clientsRouter.use('/video-channels/:nameWithHost', asyncMiddleware(generateVideo
 
 clientsRouter.use(
   '/videos/embed',
-  embedCSP,
   (req: express.Request, res: express.Response) => {
     res.removeHeader('X-Frame-Options')
     res.sendFile(embedPath)