From 9a7440c5be6cc04d0ead19266739ed7045c47622 Mon Sep 17 00:00:00 2001
From: Florian Dieminger <me@fiji-flo.de>
Date: Thu, 5 Oct 2023 13:24:05 +0200
Subject: [PATCH] feat(playground): allow img from blob and data

fixes live sample in
https://developer.mozilla.org/en-US/docs/Web/API/File_API/Using_files_from_web_applications#example_using_object_urls_to_display_images
---
 libs/constants/index.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libs/constants/index.js b/libs/constants/index.js
index d3b27feacf99..5405734d93b3 100644
--- a/libs/constants/index.js
+++ b/libs/constants/index.js
@@ -177,6 +177,7 @@ export const PLAYGROUND_UNSAFE_CSP_VALUE = cspToString({
     "'unsafe-inline'",
     "'unsafe-eval'",
   ],
+  "img-src": ["'self'", "blob:", "https:", "data:"],
   "base-uri": ["'self'"],
   "worker-src": ["'self'"],
   "manifest-src": ["'self'"],