packages/backend/src/server/csp.ts

@@ -50,6 +50,7 @@ export function generateCSP(hashedMap: Map<string, CSPHashed>, options: {
             '\'wasm-unsafe-eval\'', 
             ...scripts
         ]],
+        ['worker-src', ['\'self\'', options.mediaProxy].filter(Boolean)],
         ['object-src', ['\'none\'']],
         ['base-uri', ['\'self\'']],
         ['form-action', ['\'self\'']],