When embedding a Lottie file, the script https://cdnjs.cloudflare.com/ajax/libs/bodymovin/5.10.2/lottie.min.js insert a number of data:image base64 encoded pngs. Highly efficient, but I get a warning that the img-src is not allowed.
Refused to load the image 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADkAAABSCAYAAADuK3wcAAAACXBIWXMAAAABAAAAAQBPJcTWAAAAJHpUWHRDcmVhdG9yAAAImXNMyU9KVXBMK0ktUnBNS0tNLikGAEF6Bs5qehXFAAAEzUlEQVR4nNWcsW7jNhjHf6TdntulLlCgY/0GdZ+gfoOz0Aeo+wRNNydLlaGNx7xBEqBAR6Zbx2TreC7QufFwQ4AAPU/JHWKyg+w7iZJtydYnyb+Nskzqj08kP/5JW9EExqanFUPnGCjoA19l3DUDbhTcLDpcEwZv8lavSnvQHWiPzWABRwpe7vD1Kwshk+Bu2431iAxNVz9xDnxfQm2ndhKEm26oXuSJ6WvLNdmv5K5MLQzXRbVSka1jM3SOS+AzgernVjPg1+CV/0F1IqMI3iAjcEWm0GpEjk1PwytkBa6Y2g6D+OirK2iUFmKvaBZf6yfC+AXxSC77oZFux8dqvlm9tuKRd...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' because it violates the following Content Security Policy directive: "img-src 'self' https://cdnjs.cloudflare.com ... (etc)
I've tried to add several options to the seckit configuration page under "img-src", including "data", "data:image", "data:image/png:base64" None have worked. I've even added that whole large base64 code, but no dice.
How can we allow a base64 image to load and still use seckit?
Active
1.11
Miscellaneous