Merge pull request #779 from SISheogorath/fix/cspForVideo

Allow embedding of video and audio tags

lib/csp.js

@@ -11,6 +11,7 @@ var defaultDirectives = {
   styleSrc: ['\'self\'', '\'unsafe-inline\'', 'https://assets-cdn.github.com'], // unsafe-inline is required for some libs, plus used in views
   fontSrc: ['\'self\'', 'https://public.slidesharecdn.com'],
   objectSrc: ['*'], // Chrome PDF viewer treats PDFs as objects :/
+  mediaSrc: ['*'],
   childSrc: ['*'],
   connectSrc: ['*']
 }