child-src 'self' [https://www.youtube.com](https://www.youtube.com) [https://www.youtube-nocookie.com](https://www.youtube-nocookie.com); frame-src 'self' [https://www.youtube.com](https://www.youtube.com) [https://www.youtube-nocookie.com](https://www.youtube-nocookie.com); script-src y connect-src deben permitir [https://www.youtube.com](https://www.youtube.com) y https://*.ytimg.com.