I am getting a 404 error on a page with embedded youtube video, I think the culprite is the security headers I put in custom code.
I don’t know how to add Content-Security-Policy: default-src ‘none’; frame-src youtube.com ;
this is what I added
#Really Simple SSL
Header always set Strict-Transport-Security: “max-age=31536000” env=HTTPS
Header always set Content-Security-Policy “upgrade-insecure-requests;”
Header always set Permissions-Policy: “”
Header always set X-Content-Type-Options “nosniff”
Header always set X-XSS-Protection “1; mode=block”
Header always set Expect-CT “max-age=7776000, enforce”
Header always set Referrer-Policy: “no-referrer-when-downgrade”
#End Really Simple SSL
can you please help me ? maybe it is another plugin but I can’t figure it out.