From bd7fcc7007ced22ba33d425aed1fc71397d4b468 Mon Sep 17 00:00:00 2001
From: iamjr15 <jigyanshu15@gmail.com>
Date: Thu, 13 Aug 2026 14:53:47 +0530
Subject: [PATCH] fix(web): allow signed video playback

---
 apps/web/next.config.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/next.config.ts b/apps/web/next.config.ts
index 6e4fd05e..a3eb0004 100644
--- a/apps/web/next.config.ts
+++ b/apps/web/next.config.ts
@@ -53,7 +53,7 @@ const CONTENT_SECURITY_POLICY = [
   "style-src 'self' 'unsafe-inline'",
   `img-src 'self' data: blob: https://img.clerk.com ${INTEGRATION_LOGO_ORIGIN}`,
   "font-src 'self' data:",
-  "media-src 'self' data: blob:",
+  `media-src 'self' data: blob: ${GATEWAY_ORIGIN}`,
   `connect-src 'self' ${GATEWAY_ORIGIN} ${PREVIEW_HTTPS_ORIGIN} ${PREVIEW_WSS_ORIGIN} ${CLERK_FRONTEND_ORIGIN} ${CLERK_WEBSOCKET_ORIGIN}`,
   `frame-src 'self' ${PREVIEW_HTTPS_ORIGIN} https://challenges.cloudflare.com`,
   "worker-src 'self' blob:",