{"action":"closed","issue":{"url":"https://api.github.com/repos/rwjblue/ember-cli-content-security-policy/issues/25","labels_url":"https://api.github.com/repos/rwjblue/ember-cli-content-security-policy/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/rwjblue/ember-cli-content-security-policy/issues/25/comments","events_url":"https://api.github.com/repos/rwjblue/ember-cli-content-security-policy/issues/25/events","html_url":"https://github.com/rwjblue/ember-cli-content-security-policy/issues/25","id":52276315,"number":25,"title":"how to handle data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=","user":{"login":"granteagon","id":133823,"avatar_url":"https://avatars.githubusercontent.com/u/133823?v=3","gravatar_id":"","url":"https://api.github.com/users/granteagon","html_url":"https://github.com/granteagon","followers_url":"https://api.github.com/users/granteagon/followers","following_url":"https://api.github.com/users/granteagon/following{/other_user}","gists_url":"https://api.github.com/users/granteagon/gists{/gist_id}","starred_url":"https://api.github.com/users/granteagon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/granteagon/subscriptions","organizations_url":"https://api.github.com/users/granteagon/orgs","repos_url":"https://api.github.com/users/granteagon/repos","events_url":"https://api.github.com/users/granteagon/events{/privacy}","received_events_url":"https://api.github.com/users/granteagon/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2014-12-17T18:49:17Z","updated_at":"2016-01-11T00:26:41Z","closed_at":"2016-01-11T00:26:41Z","body":"I am not sure how to add this to my CSP.  I have tried it in many forms and it always breaks my CSP rule when I add it.\r\n\r\nMy CSP:\r\n```js\r\ncontentSecurityPolicy: {\r\n      'img-src': \"'self' *.tile.osm.org data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=\",\r\n      'script-src': \"'self' 'unsafe-eval' localhost:35729 0.0.0.0:35729 demo3.mysite.com\",\r\n      'connect-src': \"'self' ws://localhost:35729 ws://0.0.0.0:35729 demo3.mysite.com\"\r\n    }\r\n```\r\n\r\nConsole error (if I remove the data:image clause):\r\n```\r\n[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=' because it violates the following Content Security Policy directive: \"img-src 'self' *.tile.osm.org\".\r\n```"}}