how to handle data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs= about ember-cli-content-security-policy HOT 7 CLOSED

Just did a test. I was missing the trailing colon on data. data:* and 'data' both fail, but plain data: does work. For anyone stumbling on this thread, here is my working content security policy for images:

'img-src': "'self' *.tile.osm.org *.tiles.mapbox.com data:",

from ember-cli-content-security-policy.

content-security-policy.com and MDN both say data: should allow resource loading via the data scheme.

'img-src': "'self' data:" doesn't work with this addon. That would suggest this is a bug.

from ember-cli-content-security-policy.

data: works, thanks! Full object:

contentSecurityPolicy: {
  'img-src': "'self' data:"
}

from ember-cli-content-security-policy.

@granteagon Maybe close this issue?

from ember-cli-content-security-policy.

@granteagon would you mind closing this issue? ⛵

from ember-cli-content-security-policy.

Sorry guys, missed this notification.

from ember-cli-content-security-policy.

As for chrome extension manifest, the above suggestion is working. Thanks guys.

"content_security_policy": "script-src 'self' https://ssl.google-analytics.com; object-src 'self'; img-src: 'self' data:"

from ember-cli-content-security-policy.