From d0e397226cf22f12daebf894701b8023c3d08165 Mon Sep 17 00:00:00 2001
From: Doctor <codimp@exodus-privacy.eu.org>
Date: Wed, 3 Jul 2024 21:49:08 +0200
Subject: [PATCH] add video integration in better understand trackers page

add static.exodus-privacy.eu.org in dev Content-Security-Policy
---
 exodus/exodus/settings/common_dev.py    |  4 ++--
 exodus/web/templates/base/trackers.html | 15 ++++++++++++---
 2 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/exodus/exodus/settings/common_dev.py b/exodus/exodus/settings/common_dev.py
index 6382cf17..5d107173 100644
--- a/exodus/exodus/settings/common_dev.py
+++ b/exodus/exodus/settings/common_dev.py
@@ -32,8 +32,8 @@
 CSP_FORM_ACTION = ("'self'")
 CSP_FRAME_ANCESTORS = ("'self'")
 CSP_FRAME_SRC = ("'none'")
-CSP_IMG_SRC = ("'self'", "data:")
-CSP_MEDIA_SRC = ("'self'")
+CSP_IMG_SRC = ("'self'", "data:", "https://static.exodus-privacy.eu.org")
+CSP_MEDIA_SRC = ("'self'", "https://static.exodus-privacy.eu.org")
 CSP_OBJECT_SRC = ("'self'")
 CSP_SCRIPT_SRC = ("'self'", "'unsafe-inline'", "'unsafe-eval'")
 CSP_STYLE_SRC = ("'self'")
diff --git a/exodus/web/templates/base/trackers.html b/exodus/web/templates/base/trackers.html
index 3f130361..22ac2828 100644
--- a/exodus/web/templates/base/trackers.html
+++ b/exodus/web/templates/base/trackers.html
@@ -25,7 +25,10 @@ <h1 class="main-title">
     <div class="col-md-8 col-12 mb-4">
       <h4>{% trans "What is a tracker?" %}</h4>
       <p>
-        <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=sv_xF2KIJZE'>{% trans "See the video" %}</a>
+        <video class="col-12 mb-4" controls preload="none" poster="https://static.exodus-privacy.eu.org/image/les-pisteurs-en-2-minutes.jpg">
+          <source src="https://static.exodus-privacy.eu.org/video/les-pisteurs-en-2-minutes.webm" type="video/webm" />
+        </video>
+        <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=sv_xF2KIJZE'>{% trans "See the video on Youtube" %}</a>
         <p>
           <p>
             {% trans "A tracker is a piece of software whose task is to gather information on the person using the application, on how they use it, or on the smartphone being used. A tracker is usually distributed by companies as a SDK (Software Development Kit), a sort of ready-made toolkit, aiming to make it easier for application developers. To be noted : 'open source' trackers exist, their code is available and open to everyone." %}
@@ -34,7 +37,10 @@ <h4>{% trans "What is a tracker?" %}</h4>
         <div class="col-md-8 col-12 mb-4">
           <h4>{% trans "Are all trackers created equal?" %}</h4>
           <p>
-            <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=yMj3pmnElVQ'>{% trans "See the video" %}</a>
+            <video class="col-12 mb-4" controls preload="none" poster="https://static.exodus-privacy.eu.org/image/les-donnees-collectees-par-les-pisteurs.jpg">
+              <source src="https://static.exodus-privacy.eu.org/video/les-donnees-collectees-par-les-pisteurs.webm" type="video/webm" />
+            </video>
+            <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=yMj3pmnElVQ'>{% trans "See the video on Youtube" %}</a>
             <p>
               <p>
                 {% trans "No, all trackers do not have the same function and they can present different levels of (privacy) intrusion." %}
@@ -63,7 +69,10 @@ <h4>{% trans "Are all trackers created equal?" %}</h4>
             <div class="col-md-8 col-12 mb-4">
               <h4>{% trans "Who puts these trackers in?" %}</h4>
               <p>
-                <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=BaKS064_t0I'>{% trans "See the video" %}</a>
+                <video class="col-12 mb-4" controls preload="none" poster="https://static.exodus-privacy.eu.org/image/comment-les-pisteurs-arrivent-ils-dans-les-applications.jpg">
+                  <source src="https://static.exodus-privacy.eu.org/video/comment-les-pisteurs-arrivent-ils-dans-les-applications.webm" type="video/webm" />
+                </video>
+                <a target='_blank' rel='noreferrer' href='https://www.youtube.com/watch?v=BaKS064_t0I'>{% trans "See the video on Youtube" %}</a>
                 <p>
                   <p>
                     {% trans "To answer these questions we must first understand how applications are made; there are 2 possible scenarios:" %}