Error in security policy Self of content

The Content Security Policy settings for Shield allow you to add permitted hosts. The default is *. But this doesn’t cover blob, so you’ll need to add blob to your settings.

There is no error in Shield’s implementation of CSP. The error appears on your site because the resource, blob, is blocked. This is because you haven’t specified this using the “hosts” options, that we’ve provided. Please try using that option and if it doesn’t work as you need, please let us know what exactly you’re trying and what errors you’re seeing.

Please don’t cross-post your support question to our other support channels – this doesn’t help get your questions answered any sooner.

As I have to do to put blob because I have put it in the hosts / domain section in this way blob asin to dry and it has not worked for me. Thank you.

Sorry, I don’t really understand what you’ve said. You’ll need to provide full details of what you’ve done and what isn’t working for us to help you more with this.

In the header does not take blob since it seems that the plugin is not put blob so that in the header allows links that carry blob. Example: blob:https//domain.com Mozilla url attachment that explains it better.

https://developer.mozilla.org/es/docs/Web/Security/CSP/CSP_policy_directives#Palabras_claves

https://developer.mozilla.org/en-US/docs/Web/API/Blob

Content-Security-Policy: default-src ‘self’; img-src ‘self’ data: blob: filesystem:; media-src mediastream:

The example that I give you in the last message is how it should be with the blob since surely in these rules I need to put blob so that those links could be visualized with the CSP activated.

Since I didn’t find the file specified to be able to modify that rule and see if it worked.

I pass several websites where it explains the useful use that is blob in CSP and how it is put so that it is activated since it is a rule to not be able to extract the link on external websites or to deceive the attacker.

https://developer.mozilla.org/es/docs/Web/Security/CSP/CSP_policy_directives#Palabras_claves

https://developer.mozilla.org/en-US/docs/Web/API/Blob

https://www.w3.org/TR/CSP/
https://web-developer-articles.blogspot.com/2015/08/content-security-policy.html

https://jira.nuxeo.com/browse/NXP-23912

https://stackoverflow.com/questions/28467789/content-security-policy-object-src-blob

https://content-security-policy.com/