Allow blob: and data: URLs in frames. (#16)

Corresponding CL to Chromium: https://crrev.com/c/4360628
WICG · Apr 17, 2023 · 8219633 · 8219633
1 parent 2781432
commit 8219633
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/README.md b/README.md
@@ -30,7 +30,7 @@ The protection against server compromise would be no good if the application cou
 Content-Security-Policy: base-uri 'none';
                          default-src 'self';
                          object-src 'none';
-                         frame-src 'self' https:;
+                         frame-src 'self' https: blob: data:;
                          connect-src 'self' https:;
                          script-src 'self' 'wasm-unsafe-eval';
                          img-src 'self' https: blob: data:;