Content Security Policy (CSP) is a web security standard that helps prevent various types of attacks.
CSP defines a policy specifying which domains are considered trusted sources for content such as scripts, images, fonts, and other resources.
The error message may look like the following:
Refused to load the image <URL>' because it violates the following Content Security Policy directive: "img-src 'self' blob data
Depending on your use cases, implementation, browser compatibility, or internal company policies, you may encounter issues with some library features. These could include displaying screenshots, logos, or using emojis/icons within the chart.
We encourage you to properly assess the situation and choose the appropriate solution by reading the Content Security Policy article.
When changing CSP is not allowed, you can enable the iframe_loading_compatibility_mode
featureset. This featureset will instead use about:blank
as the source URL and build the iframe HTML using document.write
.
The blob method is the preferred approach but this featureset offers a fallback for non-standard applications.