From 13e7f20e3f8c4bcbfa9de0346040c5166039b395 Mon Sep 17 00:00:00 2001
From: Arjun Komath <arjun@hey.com>
Date: Sat, 10 Feb 2024 08:21:58 +1100
Subject: [PATCH] Update CSP config

---
 apps/web/next.config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/next.config.js b/apps/web/next.config.js
index 64c4592..9bd18d9 100644
--- a/apps/web/next.config.js
+++ b/apps/web/next.config.js
@@ -3,7 +3,7 @@ const withBundleAnalyzer = require("@next/bundle-analyzer")({});
 const ContentSecurityPolicy = `
   script-src 'self' 'unsafe-eval' 'unsafe-inline' *;
   style-src 'self' data: 'unsafe-inline' maxcdn.bootstrapcdn.com;
-  img-src 'self' * data:;
+  img-src 'self' * data: blob:;
   font-src 'self' data: maxcdn.bootstrapcdn.com;
   connect-src 'self' wss: *.supabase.co *.changes.page;
   worker-src 'self' blob:;