fix: add CSP headers to allow blob URLs for media playback

next.config.js

@@ -2,6 +2,20 @@
 const nextConfig = {
   reactStrictMode: false,
 
+  async headers() {
+    return [
+      {
+        source: '/:path*',
+        headers: [
+          {
+            key: 'Content-Security-Policy',
+            value: "default-src 'self'; media-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https:; font-src 'self' data:; frame-src 'self' https:;"
+          }
+        ]
+      }
+    ]
+  },
+
   images: {
     domains: ["turkmentv.gov.tm", "smstv.gov.tm", "turkmenistaninfo.gov.tm"],
     remotePatterns: [