1 files changed, 4 insertions, 0 deletions
diff --git a/src/lib.rs b/src/lib.rs
index e2fac56..4aeaca5 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -320,6 +320,10 @@ St: Clone + Send + Sync + 'static
                     "style-src 'self';",   // Only use styles we serve.
                     "base-uri 'none';",    // Do not allow to change the base URI.
                     "object-src 'none';",  // Do not allow to embed objects (Flash/ActiveX).
+
+                    // Allow embedding the Bandcamp player for jam posts.
+                    // TODO: perhaps make this policy customizable?…
+                    "frame-src 'self' https://bandcamp.com/EmbeddedPlayer/;"
                 )
             )
         ))