From 84505cb7ad6e2284b6840f7682df21695f9e2312 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=81=82=E3=82=8F=E3=82=8F=E3=82=8F=E3=81=A8=E3=83=BC?=
 =?UTF-8?q?=E3=81=AB=E3=82=85?=
 <17376330+u1-liquid@users.noreply.github.com>
Date: Wed, 25 Dec 2024 15:40:21 +0900
Subject: [PATCH] =?UTF-8?q?fix(frontend/media):=20=E3=83=A1=E3=83=87?=
 =?UTF-8?q?=E3=82=A3=E3=82=A2=E3=83=97=E3=83=AD=E3=82=AD=E3=82=B7=E4=BD=BF?=
 =?UTF-8?q?=E7=94=A8=E6=99=82=E3=82=AA=E3=83=BC=E3=83=87=E3=82=A3=E3=82=AA?=
 =?UTF-8?q?=E3=81=8C=E5=86=8D=E7=94=9F=E3=81=95=E3=82=8C=E3=81=AA=E3=81=84?=
 =?UTF-8?q?=E5=95=8F=E9=A1=8C=E3=82=92=E4=BF=AE=E6=AD=A3=20(MisskeyIO#854)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 packages/frontend/src/components/MkMediaAudio.vue | 2 ++
 packages/frontend/src/components/MkMediaVideo.vue | 2 ++
 packages/frontend/src/index.html                  | 2 +-
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/packages/frontend/src/components/MkMediaAudio.vue b/packages/frontend/src/components/MkMediaAudio.vue
index 88a55f17c..770c1107c 100644
--- a/packages/frontend/src/components/MkMediaAudio.vue
+++ b/packages/frontend/src/components/MkMediaAudio.vue
@@ -27,6 +27,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 		<audio
 			ref="audioEl"
 			preload="metadata"
+			crossorigin="anonymous"
 			controls
 			:class="$style.nativeAudio"
 			@keydown.prevent
@@ -41,6 +42,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			<audio
 				ref="audioEl"
 				preload="metadata"
+				crossorigin="anonymous"
 			>
 				<source :src="audio.url">
 			</audio>
diff --git a/packages/frontend/src/components/MkMediaVideo.vue b/packages/frontend/src/components/MkMediaVideo.vue
index f18d64133..b845cfa5b 100644
--- a/packages/frontend/src/components/MkMediaVideo.vue
+++ b/packages/frontend/src/components/MkMediaVideo.vue
@@ -34,6 +34,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			:title="video.comment ?? undefined"
 			:alt="video.comment"
 			preload="metadata"
+			crossorigin="anonymous"
 			controls
 			@keydown.prevent
 		>
@@ -54,6 +55,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			:title="video.comment ?? undefined"
 			:alt="video.comment"
 			preload="metadata"
+			crossorigin="anonymous"
 			playsinline
 			@keydown.prevent
 			@click.self="togglePlayPause"
diff --git a/packages/frontend/src/index.html b/packages/frontend/src/index.html
index f8a8b4122..cdaba3975 100644
--- a/packages/frontend/src/index.html
+++ b/packages/frontend/src/index.html
@@ -15,7 +15,7 @@
 	<title>[DEV] Loading...</title>
 	<!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
 	<meta
-		http-equiv="Content-Security-Policy"
+		http-equiv="Content-Security-Policy-Report-Only"
 		content="default-src 'self' https://newassets.hcaptcha.com/ https://challenges.cloudflare.com/ http://localhost:7493/ https://fonts.gstatic.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/;
 			worker-src 'self';
 			script-src 'self' 'unsafe-eval' https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com https://esm.sh;