Update CSP to allow images sourced from blobs

medic · Mar 19, 2019 · 9d0045c · 9d0045c
1 parent f06c5e6
commit 9d0045c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/api/src/routing.js b/api/src/routing.js
@@ -126,7 +126,8 @@ app.use(
         formAction: [`'self'`],
         imgSrc: [
           `'self'`,
-          'data:' // unsafe
+          'data:', // unsafe
+          'blob:',
         ],
         mediaSrc: [`'self'`],
         scriptSrc: [