From 79418f013ae4f5c3ef188aec35ceb510971bb197 Mon Sep 17 00:00:00 2001
From: Linus Rath <139418639+rathlinus@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:10:04 +0200
Subject: [PATCH] fix: allow blob images in CSP for inline drag-and-drop #163

---
 proxy.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/proxy.ts b/proxy.ts
index 051817f4..2a2352ca 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -20,7 +20,7 @@ export function proxy(request: NextRequest) {
     `default-src 'self'`,
     `script-src ${scriptSrc}`,
     `style-src 'self' 'unsafe-inline'`,
-    `img-src 'self' data: https:`,
+    `img-src 'self' data: blob: https:`,
     `font-src 'self'`,
     `connect-src ${connectSrc}`,
     `frame-src 'none'`,