title: Content Security Policy blocks Data
body: <p>My content security policy IMG-SRC keeps blocking images 'data:image/png;base64...' and I don't know where they are coming from.</p>
  
  <p>I use report-uri to manage my CSP reports, and it allows you to ignore any reports beginning with 'data:...', but it says "Only enable this filter if you are sure you understand what this means."</p>
  
  <p>Can anyone help me understand what this means, and where these data images would be coming from?</p>
  
  <p>UPDATE: Here is the full report as shown in the console:</p>
  
  <p>my-sitecom/:1 Refused to load the image 'data:image/png;base64,iVBORw0K...' because it violates the following Content Security Policy directive: "img-src 'self' <a href="https://my-bucket.s3.amazonaws.com" rel="nofollow noreferrer">https://my-bucket.s3.amazonaws.com</a>".</p>