securingsincity/react-ace

Loading data:image/png violates CSP

RinatRezyapov-InCountry opened this issue · 0 comments

Problem

Loading png file violates our CSP policy.
Is it possible to disable this loading in the settings?
Although it's not a security vulnerability, it still logs into console and is undesirable.

image

Sample code to reproduce your issue

  1. Open https://securingsincity.github.io/react-ace/
  2. Open Dev Tools and select Networking tab with IMG filter
  3. Observe that data:image/png is loaded

References

Progress on: #