chore: update changelog and add media-src to CSP for video playback

njb90 · njb90 · commit 15aaf54d0e7e · 2026-02-03T13:19:01.000Z
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - **Chunked upload for large files** - Files over 100MB now upload reliably using chunked upload API
+- **Video preview playback** - Added `media-src` to Content Security Policy to allow video/audio playback
 - Prevented duplicate preview panels opening for the same asset
 
 ### Removed
diff --git a/src/webview/webviewUtils.ts b/src/webview/webviewUtils.ts
@@ -78,6 +78,7 @@ export function getCSP(webview: vscode.Webview, nonce: string): string {
     `style-src ${webview.cspSource} 'unsafe-inline'`,
     `script-src ${webview.cspSource} 'nonce-${nonce}'`,
     `img-src ${webview.cspSource} https: data:`,
+    `media-src ${webview.cspSource} https:`,
     `font-src ${webview.cspSource}`,
   ].join("; ");
 }

Original file line number	Diff line number	Diff line change
`@@ -78,6 +78,7 @@ export function getCSP(webview: vscode.Webview, nonce: string): string {`
`78`	`78`	`style-src ${webview.cspSource} 'unsafe-inline'`,
`79`	`79`	`script-src ${webview.cspSource} 'nonce-${nonce}'`,
`80`	`80`	`img-src ${webview.cspSource} https: data:`,
	`81`	+ `media-src ${webview.cspSource} https:`,
`81`	`82`	`font-src ${webview.cspSource}`,
`82`	`83`	`].join("; ");`
`83`	`84`	`}`