fix: allow blob images in CSP for inline drag-and-drop #163

2026-04-08 13:10:04 +02:00
parent 4024732696
commit 79418f013a
1 changed files with 1 additions and 1 deletions
@@ -20,7 +20,7 @@ export function proxy(request: NextRequest) {
    `default-src 'self'`,
    `script-src ${scriptSrc}`,
    `style-src 'self' 'unsafe-inline'`,
-    `img-src 'self' data: https:`,
+    `img-src 'self' data: blob: https:`,
    `font-src 'self'`,
    `connect-src ${connectSrc}`,
    `frame-src 'none'`,