feat(playground): allow img from blob and data (#9771)

Fixes live sample in https://developer.mozilla.org/en-US/docs/Web/API/File_API/Using_files_from_web_applications#example_using_object_urls_to_display_images
mdn · Oct 6, 2023 · 77e4c6e · 77e4c6e
1 parent cff107f
commit 77e4c6e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/libs/constants/index.js b/libs/constants/index.js
@@ -177,6 +177,7 @@ export const PLAYGROUND_UNSAFE_CSP_VALUE = cspToString({
     "'unsafe-inline'",
     "'unsafe-eval'",
   ],
+  "img-src": ["'self'", "blob:", "https:", "data:"],
   "base-uri": ["'self'"],
   "worker-src": ["'self'"],
   "manifest-src": ["'self'"],