From 946b2510c0f6a59a4dbb26c79cd174ddc7869f7a Mon Sep 17 00:00:00 2001
From: Timmy Willison <timmywil@users.noreply.github.com>
Date: Mon, 21 Oct 2024 11:35:19 -0400
Subject: [PATCH] contribute.jquery.org: add CSP exception for vimeo player

Ref https://github.com/jquery/infrastructure-puppet/issues/54
Ref https://github.com/jquery/contribute.jquery.org/pull/151
Closes gh-472
---
 themes/contribute.jquery.org/functions.php | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 themes/contribute.jquery.org/functions.php

diff --git a/themes/contribute.jquery.org/functions.php b/themes/contribute.jquery.org/functions.php
new file mode 100644
index 00000000..3c94ddef
--- /dev/null
+++ b/themes/contribute.jquery.org/functions.php
@@ -0,0 +1,8 @@
+<?php
+ 
+// Allow loading a Vimeo video on
+// https://local.contribute.jquery.org/markup-conventions/
+add_filter( 'jq_content_security_policy', function ( $policy ) {
+	$policy[ 'frame-src' ] = "'self' player.vimeo.com";
+	return $policy;
+} );