From d5f5d27c3c7c0da77c13a1d73b8fe7cc945b7f99 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E3=81=82=E3=82=8F=E3=82=8F=E3=82=8F=E3=81=A8=E3=83=BC?=
 =?UTF-8?q?=E3=81=AB=E3=82=85?=
 <17376330+u1-liquid@users.noreply.github.com>
Date: Wed, 25 Dec 2024 15:24:58 +0900
Subject: [PATCH] =?UTF-8?q?fix(frontend/media):=20=E3=83=A1=E3=83=87?=
 =?UTF-8?q?=E3=82=A3=E3=82=A2=E3=83=97=E3=83=AD=E3=82=AD=E3=82=B7=E4=BD=BF?=
 =?UTF-8?q?=E7=94=A8=E6=99=82=E3=82=AA=E3=83=BC=E3=83=87=E3=82=A3=E3=82=AA?=
 =?UTF-8?q?=E3=81=8C=E5=86=8D=E7=94=9F=E3=81=95=E3=82=8C=E3=81=AA=E3=81=84?=
 =?UTF-8?q?=E5=95=8F=E9=A1=8C=E3=82=92=E4=BF=AE=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 packages/frontend/src/components/MkMediaAudio.vue | 2 ++
 packages/frontend/src/components/MkMediaVideo.vue | 2 ++
 packages/frontend/src/index.html                  | 2 +-
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/packages/frontend/src/components/MkMediaAudio.vue b/packages/frontend/src/components/MkMediaAudio.vue
index 88a55f17c193..770c1107ca39 100644
--- a/packages/frontend/src/components/MkMediaAudio.vue
+++ b/packages/frontend/src/components/MkMediaAudio.vue
@@ -27,6 +27,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 		<audio
 			ref="audioEl"
 			preload="metadata"
+			crossorigin="anonymous"
 			controls
 			:class="$style.nativeAudio"
 			@keydown.prevent
@@ -41,6 +42,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			<audio
 				ref="audioEl"
 				preload="metadata"
+				crossorigin="anonymous"
 			>
 				<source :src="audio.url">
 			</audio>
diff --git a/packages/frontend/src/components/MkMediaVideo.vue b/packages/frontend/src/components/MkMediaVideo.vue
index f18d641334ba..b845cfa5bb41 100644
--- a/packages/frontend/src/components/MkMediaVideo.vue
+++ b/packages/frontend/src/components/MkMediaVideo.vue
@@ -34,6 +34,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			:title="video.comment ?? undefined"
 			:alt="video.comment"
 			preload="metadata"
+			crossorigin="anonymous"
 			controls
 			@keydown.prevent
 		>
@@ -54,6 +55,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 			:title="video.comment ?? undefined"
 			:alt="video.comment"
 			preload="metadata"
+			crossorigin="anonymous"
 			playsinline
 			@keydown.prevent
 			@click.self="togglePlayPause"
diff --git a/packages/frontend/src/index.html b/packages/frontend/src/index.html
index f8a8b4122fc7..cdaba39752a5 100644
--- a/packages/frontend/src/index.html
+++ b/packages/frontend/src/index.html
@@ -15,7 +15,7 @@
 	<title>[DEV] Loading...</title>
 	<!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
 	<meta
-		http-equiv="Content-Security-Policy"
+		http-equiv="Content-Security-Policy-Report-Only"
 		content="default-src 'self' https://newassets.hcaptcha.com/ https://challenges.cloudflare.com/ http://localhost:7493/ https://fonts.gstatic.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/;
 			worker-src 'self';
 			script-src 'self' 'unsafe-eval' https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com https://esm.sh;