fix: security policy headers for media

resources/css/docs-common.css

@@ -210,6 +210,7 @@ a:active,
 .primary-navigation a {
   padding: 20px 20px;
   text-decoration: none;
+  white-space: nowrap;
 }
 
 .primary-navigation a.active {

src/SecurityPolicyHeaders.php

@@ -44,6 +44,7 @@ final readonly class SecurityPolicyHeaders
             "frame-ancestors 'none'",
             "manifest-src 'self'",
             "img-src 'self'",
+            "media-src 'self'",
             "object-src 'none'",
             "script-src 'self'",
             "style-src 'self' ".$this->getHeaderNonce($request),