hubs: Videos broken in Safari

Description When videos are brought into a room in Safari they appear just as a broken link

To Reproduce Steps to reproduce the behavior:

1. Go to hubs room in safari
2. Open a video from the media browser

Expected behavior video plays

Screenshots

Hardware Macbook pro Safari 13.1

Additional context Console log

[Log] A-Frame Version: https://github.com/MozillaReality/aframe (engine-637853945f3679009b62.js, line 1)
[Log] three Version: https://github.com/MozillaReality/three.js (engine-637853945f3679009b62.js, line 1)
[Log] core:schema:warn Default value `null` does not match type `string` in component `media-loader`  (engine-637853945f3679009b62.js, line 1, x3)
[Log] core:schema:warn Default value `null` does not match type `string` in component `camera-focus-button`  (engine-637853945f3679009b62.js, line 1)
[Log] core:schema:warn Default value `null` does not match type `string` in component `emit-scene-event-on-remove`  (engine-637853945f3679009b62.js, line 1)
[Log] core:schema:warn Default value `[object Object]` does not match type `string` in component `pen`  (engine-637853945f3679009b62.js, line 1)
[Log] core:schema:warn Default value `[object Object]` does not match type `string` in component `pen-laser`  (engine-637853945f3679009b62.js, line 1, x3)
[Log] App version: 1.0.0.20200408001052 (hub-5f6a845a2e4adaa54053.js, line 1)
[Log] Tracking: Sentry DSN: https://013d6a364fed43cdb0539a61d520597a@sentry.prod.mozaws.net/370 (hub-5f6a845a2e4adaa54053.js, line 1)
[Log] Tracking: Google Analytics ID: UA-77033033-12 (vendor-88048671cc1eb6f039f2.js, line 512)
[Error] Refused to connect to https://www.google-analytics.com/j/collect?v=1&_v=j81&a=1788576929&t=pageview&_s=1&dl=https%3A%2F%2Fhubs.mozilla.com%2FnpiYqSZ%2F%2F&dp=%2Fhub&ul=en-ca&de=UTF-8&dt=Room%20Landing%20Page&sd=24-bit&sr=1680x1050&vp=1334x829&je=1&_u=QACAAEABAAAAAC~&jid=525661351&gjid=564282899&cid=1388847486.1585609375&tid=UA-77033033-12&_gid=1451958810.1586371538&_r=1&z=1458548605 because it does not appear in the connect-src directive of the Content Security Policy.
[Warning] No WebGL 2.0 context available. Falling back to WebGL 1.0 (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] THREE.WebGLRenderer – "106dev" (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Using Non-VR bindings. (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] Batching requires WebGL 2. Disabling batching. (vendor-88048671cc1eb6f039f2.js, line 512)
[Error] Unrecognized Content-Security-Policy directive 'worker-src'. (x2)

[Log] Hub ID: npiYqSZ (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Reticulum @ mystifying-artificer.reticulum.io: v1.0.20200403193204 on arbre (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Phoenix Socket URL: wss://mystifying-artificer.reticulum.io:443 (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Logged into account 485310044812869979 (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] THREE.GLTFLoader: Duplicating UVs to support aoMap. (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Janus host: agitated-elf.reticulum.io:443 (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Scene URL: https://uploads-prod.reticulum.io/files/55bdd017-a55b-4bb5-bc3d-f5963a171f0f.bin (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] THREE.GLTFLoader: Duplicating UVs to support aoMap. (vendor-88048671cc1eb6f039f2.js, line 512, x4)
[Warning] [three-pathfinding]: Use THREE.BufferGeometry, not THREE.Geometry, to create zone. (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] traverseMeshesAndAddShapes (hub-5f6a845a2e4adaa54053.js, line 1)
[Log] heightfield or trimesh found on scene (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] THREE.GLTFLoader: Duplicating UVs to support aoMap. (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1093x616) to (1024x512). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x640) to (1024x512). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x144) to (1024x128). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (301x320) to (256x256). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x125) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x108) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x127) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x115) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x109) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x155) to (1024x128). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x106) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (2423x1567) to (2048x1024). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (595x508) to (512x256). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (26x22) to (16x16). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (118x94) to (64x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x178) to (1024x128). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1023x111) to (512x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x121) to (1024x64). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x314) to (1024x256). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x170) to (1024x128). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1024x568) to (1024x512). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (1280x720) to (1024x512). (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] THREE.WebGLRenderer: Texture has been resized from (512x848) to (512x512). (vendor-88048671cc1eb6f039f2.js, line 512)
[Log] Using microphone: Built-in Microphone (vendor-88048671cc1eb6f039f2.js, line 512)
[Warning] Avatar does not an 'allOpen' animation, disabling hand animations (vendor-88048671cc1eb6f039f2.js, line 512, x2)
[Error] Failed to load resource: the server responded with a status of 403 (Forbidden) (videoplayback, line 0)
[Error] Error adding media – Error: Unsupported content type: text/plain
Error: Unsupported content type: text/plain
	(anonymous function) (vendor-88048671cc1eb6f039f2.js:512:125981)
	(anonymous function) (hub-5f6a845a2e4adaa54053.js:1:301480)
	generatorResume
	C (hub-5f6a845a2e4adaa54053.js:1:289652)
	r (hub-5f6a845a2e4adaa54053.js:1:289855)
	promiseReactionJob
[Error] Releasing uncached texture src error
	(anonymous function) (vendor-88048671cc1eb6f039f2.js:512:125981)
	release (hub-5f6a845a2e4adaa54053.js:1:559609)
	remove (hub-5f6a845a2e4adaa54053.js:1:575745)
	(anonymous function) (engine-637853945f3679009b62.js:1:74921)
	removeComponent (engine-637853945f3679009b62.js:1:84832)
	value (engine-637853945f3679009b62.js:1:82072)
	detachedCallback (engine-637853945f3679009b62.js:1:11121)
	p (vendor-88048671cc1eb6f039f2.js:687:1386)
	(anonymous function) (vendor-88048671cc1eb6f039f2.js:687:133)
	n (vendor-88048671cc1eb6f039f2.js:687:4723)
	(anonymous function) (vendor-88048671cc1eb6f039f2.js:687:4844)
[Error] Unrecognized Content-Security-Policy directive 'worker-src'.

[Error] Unrecognized Content-Security-Policy directive 'worker-src'.

[Error] Unrecognized Content-Security-Policy directive 'worker-src'.

[Error] Unrecognized Content-Security-Policy directive 'worker-src'.

[Error] Not allowed to load local resource: blob://nullhttps//hubs.mozilla.com/gifparsing.worker-ef1abc6384654b227b6a.js.map
[Error] Not allowed to request resource
[Error] Cannot load blob://nullhttps//hubs.mozilla.com/gifparsing.worker-ef1abc6384654b227b6a.js.map due to access control checks.
[Error] Not allowed to load local resource: blob://nullhttps//hubs.mozilla.com/sketchfab-zip.worker-91fe1d86be396c2ee61e.js.map
[Error] Not allowed to request resource
[Error] Cannot load blob://nullhttps//hubs.mozilla.com/sketchfab-zip.worker-91fe1d86be396c2ee61e.js.map due to access control checks.
[Error] Not allowed to load local resource: blob://nullhttps//hubs.mozilla.com/color-shift.worker-787a591ca4809b890107.js.map
[Error] Not allowed to request resource
[Error] Cannot load blob://nullhttps//hubs.mozilla.com/color-shift.worker-787a591ca4809b890107.js.map due to access control checks.
[Error] Not allowed to load local resource: blob://nullhttps//hubs.mozilla.com/ammo.worker-b7ecdb1d700f880b1e36.js.map
[Error] Not allowed to request resource
[Error] Cannot load blob://nullhttps//hubs.mozilla.com/ammo.worker-b7ecdb1d700f880b1e36.js.map due to access control checks.

┆Issue is synchronized with this Jira Task