Update CSP to allow images sourced from blobs

kennsippell · garethbowen · commit 9d0045cfdb4d · 2019-03-20T11:11:31.000+13:00
diff --git a/api/src/routing.js b/api/src/routing.js
@@ -126,7 +126,8 @@ app.use(
         formAction: [`'self'`],
         imgSrc: [
           `'self'`,
-          'data:' // unsafe
+          'data:', // unsafe
+          'blob:',
         ],
         mediaSrc: [`'self'`],
         scriptSrc: [
