cmd/golangorg: fix Content Security Policy breaks embedded YouTube videos

Fixes: golang/go#47973

Change-Id: I740191abdcf971efd668f2cb683f01cece545052
GitHub-Last-Rev: 38ff822ae8e6a62f86c3ba0c3a79bb9de36fa1b5
GitHub-Pull-Request: golang/website#89
Reviewed-on: https://go-review.googlesource.com/c/website/+/347212
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
Reviewed-by: Jamal Carvalho <jamal@golang.org>
Trust: Dmitri Shuralyov <dmitshur@golang.org>
Run-TryBot: Dmitri Shuralyov <dmitshur@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Website-Publish: DO NOT USE <dmitshur@google.com>
diff --git a/cmd/golangorg/csp.go b/cmd/golangorg/csp.go
index 7e73f44..397aadc 100644
--- a/cmd/golangorg/csp.go
+++ b/cmd/golangorg/csp.go
@@ -72,6 +72,7 @@
 		"feedback.googleusercontent.com",
 		"www.googletagmanager.com",
 		"scone-pa.clients6.google.com",
+		"www.youtube.com",
 	},
 	"img-src": {
 		self,