Content Security Policy “data” not working for base64 Images in Chrome 28

by

According to the grammar in the CSP spec, you need to specify schemes as scheme:, not just scheme. So, you need to change the image source directive to:

img-src 'self' data:;

More Related Contents:

  1. The Chrome extension popup is not working, click events are not handled
  2. How does Content Security Policy (CSP) work?
  3. Trouble with content security policy
  4. Refused to load the script because it violates the following Content Security Policy directive
  5. Injecting iframe into page with restrictive Content Security Policy
  6. Content Security Policy: The page’s settings blocked the loading of a resource
  7. What is happening when I have two CSP (Content Security Policies) policies – header & meta?
  8. Console shows error about Content Security policy and lots of failed GET requests
  9. What’s the purpose of the HTML “nonce” attribute for script and style elements?
  10. How to override content security policy while including script in browser JS console?
  11. Content-Security-Policy error in google chrome extension making
  12. Get JSON in a Chrome extension
  13. Why is script-src-elem not using values from script-src as a fallback?
  14. Using attr to set css variable inline that work with CSP
  15. Jenkins Content Security Policy
  16. Allow All Content Security Policy?
  17. Extension refuses to load the script due to Content Security Policy directive
  18. Chrome version 18+: How to allow inline scripting with a Content Security Policy?
  19. Cordova – refuse to execute inline event handler because it violates the following content Security policy
  20. How can I allow Mixed contents (http with https) using content-security-policy meta tag?
  21. Content Security Policy: “img-src ‘self’ data:”
  22. Google Adwords CSP (content security policy) img-src
  23. How to fix chrome-extension inline JavaScript invocation error?
  24. GTM not propagating nonce to Custom HTML tags

Leave a Comment