From 145c5c288ce645142679b5da742798a9109d802e Mon Sep 17 00:00:00 2001
From: Claudio Ortolina <cloud8421@gmail.com>
Date: Fri, 13 Mar 2026 14:47:35 +0000
Subject: [PATCH] Allow loading img blobs in csp directives

---
 lib/music_library_web/router.ex | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/music_library_web/router.ex b/lib/music_library_web/router.ex
index 45efe8a1..f56a0e27 100644
--- a/lib/music_library_web/router.ex
+++ b/lib/music_library_web/router.ex
@@ -18,7 +18,7 @@ defmodule MusicLibraryWeb.Router do
                 "; script-src 'self' 'unsafe-inline'#{@dev_origins}" <>
                 "; style-src 'self' 'unsafe-inline' https://rsms.me#{@dev_origins}" <>
                 "; font-src 'self' https://rsms.me" <>
-                "; img-src 'self' data: #{@img_origins}" <>
+                "; img-src 'self' data: blob: #{@img_origins}" <>
                 "; connect-src 'self'#{@dev_origins}" <>
                 "; frame-ancestors 'self'" <>
                 "; base-uri 'self'"
@@ -186,7 +186,7 @@ defmodule MusicLibraryWeb.Router do
         "; script-src 'self' 'nonce-#{nonce}'" <>
         "; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <>
         "; font-src 'self' data: https://rsms.me" <>
-        "; img-src 'self' data: 'nonce-#{nonce}' #{@img_origins}" <>
+        "; img-src 'self' data: blob: 'nonce-#{nonce}' #{@img_origins}" <>
         "; connect-src 'self'" <>
         "; frame-ancestors 'self'" <>
         "; base-uri 'self'"